331bb4561d
prior to this commit, only users with manage_feature_flags permission can see the features tab in account settings. this commit creates a new view_feature_flags permission (granted to everyone who has manage_feature_flags) that allows access to the page (which will be read-only if manage_feature_flags is not also possessed). test plan: - PRIOR TO APPLYING THIS PATCHSET, create a custom account role and give it "Feature Options - enable / disable" permission - apply the patch set, run migrations, and restart the server - ensure the "Feature Options - view" permission appears in Permissions and is granted to the custom role created in the first step - set up a role that contains "view" but not "enable / disable" and ensure a user in this role sees a read-only view - if you want to be fancy, give _both_ permissions to a role, and edit the role override in the console for manage_feature_flags to say "applies_to_self: false" in site admin in the console and confirm the user gets a read-only view in site admin and a writeable view in a normal root account closes ADMIN-2802 Change-Id: I64da46d7d9efa587108acd0358cea5561f0e5376 Reviewed-on: https://gerrit.instructure.com/204208 Tested-by: Jenkins Reviewed-by: Rex Fleischer <rfleischer@instructure.com> QA-Review: KC Naegle <knaegle@instructure.com> Product-Review: KC Naegle <knaegle@instructure.com> |
||
|---|---|---|
| .. | ||
| migrate | ||