Add boundaries to permissions
What does this MR do and why?
- Add
boundariestoAuthz::Permissionclass. - Updates permission files which have
available_for_tokens = trueand adds a list of boundaries for them. - Updates GraphQL query to return
boundariesfor each permission.
How to set up and validate locally
- Enable feature flag in the rails console:
Feature.enable(:fine_grained_personal_access_tokens)
- Log-in as any user and navigate to GraphQL explorer on
/graphql-explorerand run the following query:
query {
accessTokenPermissions {
name
category
boundaries
}
}
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #577889
Edited by Hinam Mehra