Skip to content
代码片段 群组 项目
未验证 提交 5909cbdb 编辑于 作者: Chad Woolley's avatar Chad Woolley 提交者: GitLab
浏览文件

Merge branch 'jswain_update_policies_codeowners_for_modular_policies' into 'master'

Unblock modular policy POC for create:ide

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/153348



Merged-by: default avatarChad Woolley <cwoolley@gitlab.com>
Approved-by: default avatarAdebayo Adesanya <aadesanya@gitlab.com>
Approved-by: default avatarChad Woolley <cwoolley@gitlab.com>
Approved-by: default avatarThomas Woodham <twoodham@gitlab.com>
Co-authored-by: default avatarJay Swain <jswain@gitlab.com>
No related branches found
No related tags found
无相关合并请求
...@@ -1073,6 +1073,8 @@ lib/gitlab/checks/** ...@@ -1073,6 +1073,8 @@ lib/gitlab/checks/**
/config/initializers/declarative_policy_cached_attributes.rb /config/initializers/declarative_policy_cached_attributes.rb
/app/policies/ /app/policies/
/ee/app/policies/ /ee/app/policies/
/ee/app/policies/remote_development/ @gitlab-org/maintainers/remote-development/backend
/ee/app/policies/clusters/ @gitlab-org/maintainers/remote-development/backend
/ee/app/models/members/member_role.rb /ee/app/models/members/member_role.rb
/ee/app/models/auth/member_role_ability_loader.rb /ee/app/models/auth/member_role_ability_loader.rb
/ee/app/models/preloaders/user_member_roles_in_groups_preloader.rb /ee/app/models/preloaders/user_member_roles_in_groups_preloader.rb
......
...@@ -296,3 +296,7 @@ A base role typically has permissions that allow creation or management of artif ...@@ -296,3 +296,7 @@ A base role typically has permissions that allow creation or management of artif
### Consuming seats ### Consuming seats
If a new user with a role `Guest` is added to a member role that includes enablement of an ability that is **not** in the `CUSTOMIZABLE_PERMISSIONS_EXEMPT_FROM_CONSUMING_SEAT` array, a seat is consumed. We simply want to make sure we are charging Ultimate customers for guest users, who have "elevated" abilities. This only applies to billable users on SaaS (billable users that are counted towards namespace subscription). More details about this topic can be found in [this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/390269). If a new user with a role `Guest` is added to a member role that includes enablement of an ability that is **not** in the `CUSTOMIZABLE_PERMISSIONS_EXEMPT_FROM_CONSUMING_SEAT` array, a seat is consumed. We simply want to make sure we are charging Ultimate customers for guest users, who have "elevated" abilities. This only applies to billable users on SaaS (billable users that are counted towards namespace subscription). More details about this topic can be found in [this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/390269).
### Modular Policies
In an effort to support the [GitLab Modular Monolith blueprint](../../architecture/blueprints/modular_monolith/index.md) the [Authorization group](https://handbook.gitlab.com/handbook/engineering/development/sec/govern/authorization/) is [collaborating](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/153348) with the [Create:IDE group](https://handbook.gitlab.com/handbook/engineering/development/dev/create/ide/). Once a POC is implemented, the findings will be [discussed](https://gitlab.com/gitlab-org/gitlab/-/issues/454934) and the Authorization group will make a decision of what the modular design of policies will be going forward.
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册