Skip to content

Update user access functionality for core

Readable link


The original proposal only included user impersonation. For the agent, all user impersonation functionality should be Premium. But we want some level of frontend access in Core as well, so the proposal had to be reworked:

  • By default, the agent's identity is used for all tiers.
  • We explicitly state a minimum_role for access, defaulting to developer.
  • Since there is no obvious way to take the union of two different user identities (agent vs user), the most specific authorization source now determines the identity used.

Resolves #312 (closed)

Edited by Hordur Freyr Yngvason

Merge request reports