@@ -6,7 +6,8 @@
|
||||
'@backstage/plugin-scaffolder': minor
|
||||
---
|
||||
|
||||
BREAKING :
|
||||
BREAKING `/alpha`: Converted `scaffolder.task.read` and `scaffolder.task.cancel` into Resource Permissions.
|
||||
|
||||
- Converted `scaffolder.task.read` and `scaffolder.task.cancel` into Resource Permissions.
|
||||
- Added a new scaffolder rule `isTaskOwner` for `scaffolder.task.read` and `scaffolder.task.cancel` to allow for conditional permission policies such as restricting access to tasks and task events based on task creators.
|
||||
BREAKING `/alpha`: Added a new scaffolder rule `isTaskOwner` for `scaffolder.task.read` and `scaffolder.task.cancel` to allow for conditional permission policies such as restricting access to tasks and task events based on task creators.
|
||||
|
||||
BREAKING `/alpha`: Retrying a task now requires both `scaffolder.task.read` and `scaffolder.task.create` permissions, replacing the previous requirement of `scaffolder.task.read` and `scaffolder.task.cancel`.
|
||||
|
||||
@@ -709,7 +709,7 @@ export async function createRouter(
|
||||
const credentials = await httpAuth.credentials(req);
|
||||
const task = await taskBroker.get(taskId);
|
||||
|
||||
// Requires both read and cancel permissions
|
||||
// Requires both read and create permissions
|
||||
await checkPermission({
|
||||
credentials,
|
||||
permissions: [taskCreatePermission],
|
||||
|
||||
Reference in New Issue
Block a user