feat(editor): Add secret store scopes to custom project role editor#2090
Draft
everettbu wants to merge 10 commits into
Draft
feat(editor): Add secret store scopes to custom project role editor#2090everettbu wants to merge 10 commits into
everettbu wants to merge 10 commits into
Conversation
Enable custom project roles to include external secrets provider scopes (read, create, update, delete, sync) in the role editor UI, gated behind the EXTERNAL_SECRETS_FOR_PROJECTS feature flag. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
… editor Add externalSecret:list as a separately toggleable permission so users can explicitly grant the ability to reference external secrets in credential fields via $secrets expressions. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…tom role editor" This reverts commit cc81176.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Mirror of n8n-io/n8n#26143
Original author: ireneea
Summary
Enable custom project roles to include external secrets provider scopes in the role editor UI. This allows instance admins to create custom project roles that grant users access to manage secret stores within their projects.
Changes:
externalSecretsProviderscopes (read, create, update, delete, sync) to the role editor checkboxes inprojectRoleScopes.tsEXTERNAL_SECRETS_FOR_PROJECTSfeature flag inProjectRoleView.vueexternalSecret:listwhenexternalSecretsProvider:readis selected (needed for expression editor autocomplete)How to test:
EXTERNAL_SECRETS_FOR_PROJECTSfeature flagRelated Linear tickets, Github issues, and Community forum posts
https://linear.app/n8n/issue/LIGO-273/project-scope-enable-custom-project-role-that-include-secrets-scopes
Review / Merge checklist
release/backport(if the PR is an urgent fix that needs to be backported)