Skip to content

docs(rbac): reconcile role matrix with current implementation#98

Merged
yosriady merged 22 commits into
mainfrom
claude/rbac-role-matrix-update
Jul 10, 2026
Merged

docs(rbac): reconcile role matrix with current implementation#98
yosriady merged 22 commits into
mainfrom
claude/rbac-role-matrix-update

Conversation

@yosriady

@yosriady yosriady commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Reconciles the RBAC role matrix in security/roles.mdx with the current product implementation (TEAM_PERMISSIONS), alongside getformo/formono#1999.

Overview text

  • Editor and Member descriptions rewritten to match the new gates.
  • Fixed: admins can create projects (the old text implied otherwise).

Matrix — new / changed rows

  • View workspace members list — Owner/Admin only (was effectively visible to everyone).
  • Access and manage workspace settings — Owner/Admin only.
  • Access API keys / MCP — Owner/Admin only (new row).
  • Access project settings page — hidden from Members; Editors keep it (they still manage contracts/alerts/lifecycle there).
  • Access the Explorer (SQL query editor and wallet search) — blocked for Members (new row).
  • Create dashboards — blocked for Members (new row; same permission as charts).
  • Edit user profile properties and labels — blocked for Members (new row).

Matrix — rows the docs were missing

  • Edit lifecycle thresholds (Owner/Admin/Editor).
  • View agent memory (all roles) and Curate / manage agent memory (Owner/Admin/Editor).

A couple of sections were regrouped for clarity (Explorer folded in with Charts & Dashboards; new "Users & Wallets" and "Data & Access" groupings). All ✅/❌ values were derived from TEAM_PERMISSIONS plus the UI-level gates shipped in the linked app PR.

🤖 Generated with Claude Code

https://claude.ai/code/session_01RKgfDzpRcpXdD7qmviggQE


Generated by Claude Code


View with Codesmith Autofix with Codesmith
Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.

- Members: block Explorer, dashboard creation, profile property/label editing,
  members list, and project/workspace settings visibility
- API keys / MCP: owner/admin only
- Editors keep project settings (contracts/alerts/lifecycle)
- Add missing rows: lifecycle thresholds, agent memory view/manage
- Fix Overview to match (admins can create projects)
@mintlify

mintlify Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
formo 🟢 Ready View Preview Jul 10, 2026, 3:51 AM

💡 Tip: Enable Workflows to automatically generate PRs for you.

- Merge agent memory rows into 'Manage agent memory' (members excluded)
- Split 'Access API keys / MCP' into 'Manage API Keys' and 'MCP'
- Rename: View wallet profiles; Explorer (SQL editor and wallet search);
  Create and edit project settings
… rows

- Agent memory and lifecycle thresholds are now owner/admin only (editor ❌)
- Replace ambiguous "Create and edit project settings" with explicit rows:
  Create & rename projects, Manage project integrations, Manage project
  notifications
- Update Editor overview to match
@yosriady yosriady merged commit fcd75c7 into main Jul 10, 2026
6 checks passed
@yosriady yosriady deleted the claude/rbac-role-matrix-update branch July 10, 2026 05:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant