Skip to content

Clarify view vs manage permissions in Team permissions table#3475

Merged
emptyhammond merged 1 commit into
mainfrom
DX-1547/init
Jul 17, 2026
Merged

Clarify view vs manage permissions in Team permissions table#3475
emptyhammond merged 1 commit into
mainfrom
DX-1547/init

Conversation

@emptyhammond

@emptyhammond emptyhammond commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Fixes the ambiguous "Manage API keys" row in the Team permissions table at /docs/platform/account/team (DX-1547).

The table previously only had a "Manage API keys" row (Admin/Owner ✓), implying the Developer role cannot interact with API keys at all. Verified behaviour: Developers have view-only access to API keys — and to all other app features (integrations, channel rules, queues, etc.) — while only Admins and the account owner can create/edit/delete.

Changes

  • Add explicit View rows for API keys, integrations, channel rules, and queues (Developer ✓, Billing -, Admin ✓, Owner ✓)
  • Add explicit Manage rows for integrations, channel rules, and queues (Admin/Owner only), alongside the existing "Manage API keys" row
  • Add a catch-all sentence above the table so items not listed (message persistence, domains, connections, logs, reports, settings) don't require inference: Developers have view-only access to all app features; only admins and the account owner can create, edit, or delete app resources

Notes for review

  • Scope grew slightly beyond the ticket: integrations, channel rules, and queues were equally ambiguous, so they get the same treatment.
  • The pre-existing "View/Manage app configuration" rows now overlap with the new explicit rows (channel rules etc. arguably are app configuration). Left in place deliberately — happy to consolidate if you'd prefer.
  • Billing left as - for all new rows, consistent with Billing's existing access.

Resolves DX-1547

🤖 Generated with Claude Code

@emptyhammond
emptyhammond requested a review from m-hulbert July 17, 2026 16:35
@coderabbitai

coderabbitai Bot commented Jul 17, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 30fd4d63-5d74-4a80-9a60-234b04e97c8d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch DX-1547/init

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@m-hulbert m-hulbert left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Small tweak on the naming, but LGTM otherwise.

Comment thread src/pages/docs/platform/account/team.mdx Outdated
Comment thread src/pages/docs/platform/account/team.mdx Outdated
The Team permissions table only had a "Manage API keys" row (Admin/Owner),
implying Developers cannot interact with API keys at all. In fact Developers
have view-only access to API keys, integrations, channel rules, queues, and
all other app features.

- Add explicit "View" rows for API keys, integrations, channel rules, and
  queues (Developer, Admin, Owner)
- Add explicit "Manage" rows for integrations, channel rules, and queues
  (Admin, Owner only)
- Add a catch-all note above the table stating Developers have view-only
  access to all app features, with create/edit/delete limited to admins
  and the account owner

Resolves DX-1547

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@emptyhammond
emptyhammond enabled auto-merge July 17, 2026 17:43
@emptyhammond
emptyhammond merged commit 3cc066a into main Jul 17, 2026
7 checks passed
@emptyhammond
emptyhammond deleted the DX-1547/init branch July 17, 2026 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants