Remove custom_ability_read_admin_projects feature flag
What does this MR do and why?
Remove custom_ability_read_admin_projects feature flag which has been enabled in production since Sep 19.
- Admin users can now create custom admin roles with the read_admin_projects ability
- Update GraphQL endpoint in
/admin/projectsfrom:projectsto:admin_projectsto support displaying unauthorized projects to non-admin users withread_admin_projectspermission
References
[FF] `custom_ability_read_admin_projects` -- us... (#561997 - closed)
Screenshots or screen recordings
Screen_Recording_2025-09-23_at_4.23.52_PM
How to set up and validate locally
- Enable
custom_admin_rolesfeature flag - Login with an admin, enable admin mode (doc), enter admin mode, and go to http://localhost:9393/admin/application_settings/roles_and_permissions/
- Create a custom admin role with
View Projectspermissions - Assign the custom admin role to a non-admin user (doc)
- Login with the user
- Go to Admin area projects page and verify that all projects are displayed (including projects the user does not have access to).
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Eugie Limpin