Add boundaries to permissions

What does this MR do and why?

  • Add boundaries to Authz::Permission class.
  • Updates permission files which have available_for_tokens = true and adds a list of boundaries for them.
  • Updates GraphQL query to return boundaries for each permission.

How to set up and validate locally

  1. Enable feature flag in the rails console:
Feature.enable(:fine_grained_personal_access_tokens)
  1. Log-in as any user and navigate to GraphQL explorer on /graphql-explorer and run the following query:
query {
  accessTokenPermissions {
    name  
    category  
    boundaries
  }
}

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #577889

Edited by Hinam Mehra

Merge request reports

Loading