Deprecate/remove least secure "Job token permissions" inbound control option
Problem to solve
Proposal
Deprecate/remove the All groups and projects option:
Authorized groups and projects:
🔘 All groups and projects👈 🔘 This project only🔘 This project and any groups and projects in the allowlist
What these options do:
-
All groups and projectssetsinboundJobTokenScopeEnabled: false -
This project and any groups and projects in the allowlistsetsinboundJobTokenScopeEnabled: true -
This project onlysetsinboundJobTokenScopeEnabled: trueand only allows access from within the project
Edited by Miranda Fluharty