Frontend: Allow CI_JOB_TOKEN to push to its own repository
This is the frontend/UI work for #389060 (closed). Design discussions are in the main issue.
Problem
CI_JOB_TOKEN
allows to clone private repo, but doesn't allow to push back to the same repo.
Users can push with a personal access token or project access token but we want to give them a shorter lived token like CI_JOB_TOKEN
to be able to do this with.
Proposal
Add Repository Write permissions matching the users role to the scope for the CI_JOB_TOKEN
.
Implementation Notes
Navigation
This setting will be shown in Settings > CI/CD > Token Access.
The permission control sits above the allowlist to focus solely on the current project's scope.
Feature
The permission checkbox is unchecked by default, as the push permission is opt-in.
Show a toast message after saving to confirm that the user's action has been successfully completed.
This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.