feat(permission): support global read-only role visibility across all project#4604

Merged

lilianzhu merged 37 commits intokoderover:mainfrom

leebrouse:feature/global-readonlyRole

Apr 28, 2026

Commits on Apr 16, 2026

feat(permission): support global read-only role visibility across all projects
leebrouse
committed
feat: add explicit global_read_only role flag and enforce read-only authorization across all projects
leebrouse
committed
feat: update ua for the global readonly role
leebrouse
committed
feat: update ua migrate
leebrouse
committed
feat: change ua in 430.go
leebrouse
committed
feat: update new ua for global readonly role
leebrouse
committed
feat: update ua
leebrouse
committed
feat: updata ua 430.go
leebrouse
committed
feat: update ua 430.go
leebrouse
committed
fix(permission): fix global read-only role permission validation and assignment logic
leebrouse
committed
fix(permission): fix global read-only role permission filtering
leebrouse
committed
fix(permission): remove validation logic for creating and updating global read-only roles
leebrouse
committed
fix(permission): fix permission validation and synchronization logic for global read-only roles
leebrouse
committed
fix(permission): fix global read-only role not taking effect in project-level permissions
leebrouse
committed
feat: add VerbGetRegistryManagement
leebrouse
committed
feat(permission): add S3 storage management permission to global read-only system actions
leebrouse
committed
feat: add some comments
leebrouse
committed
refactor: deprecate GlobalReadOnly role backfilling and optimize authorization permission checks
leebrouse
committed
refactor: deprecate global read-only role validation and logic
leebrouse
committed
refactor: remove global read-only role logic and associated field initialization
leebrouse
committed
feat: implement global-read-only role backfill in migration 430 and remove legacy code
leebrouse
committed
feat: add idempotent global-read-only role migration and define post-upgrade job configuration
leebrouse
committed
refactor: optimize group role permission logic and remove obsolete upgrade assistant configuration
leebrouse
committed
refactor: remove global read-only role validation logic and simplify authorization checks
leebrouse
committed
refactor(permission): extract permission handling logic into helper functions to improve maintainability
leebrouse
committed
fix: rollback last commit
leebrouse
committed

Commits on Apr 17, 2026

Commits on Apr 23, 2026

Merge remote-tracking branch 'upstream/main' into feature/global-readonlyRole
leebrouse
committed

Commits on Apr 24, 2026

fix: change permission setting in the field definition creating operation
leebrouse
committed

Commits on Apr 28, 2026