Role Permissions
About 871 wordsAbout 3 min
Cloud Native Build divides members into five roles: Guest, Assistant, Developer, Administrator, Owner.
- Public repositories: Non-members and unauthenticated users can also access, with the
Anonymousrole. - Certain resources (PR, Issue, comments, etc.): Non-members can also create them, with the
Creatorrole.
The following table lists the permissions for each role across resource types:
Group
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View Group | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Edit Group Settings | ✔ | ✔ | ||||||
| Group Member Management | ✔ | ✔ | ||||||
| View Organization Settings | ✔ | ✔ | ✔ | ✔ | ✔ | |||
| Create Repository/Artifact | ✔ | ✔ | ||||||
| Create SubGroup | ✔ | ✔ | ||||||
| Delete, Transfer | ✔ |
Notes: Group Member Management includes: Add members, Remove members, Modify member permissions.
Repository
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View Issue, Pull requests, Missions, Registries | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View Issue, Pull requests, Missions, Registries | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View Issue, Pull requests, Missions, Registries | Secret | ✔ | ✔ | |||||
| View Repository Settings | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View Repository Settings | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View Repository Settings | Secret | ✔ | ✔ | |||||
| Manage Repository Settings | Public | ✔ | ✔ | |||||
| Manage Repository Settings | Private | ✔ | ✔ | |||||
| Manage Repository Settings | Secret | ✔ | ✔ | |||||
| Manage Repository Members | Public | ✔ | ✔ | |||||
| Manage Repository Members | Private | ✔ | ✔ | |||||
| Manage Repository Members | Secret | ✔ | ✔ | |||||
| Delete, Transfer | Public | ✔ | ||||||
| Delete, Transfer | Private | ✔ | ||||||
| Delete, Transfer | Secret | ✔ | ||||||
| View committers | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View committers | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View committers | Secret | ✔ | ✔ |
Notes: View Repository Settings includes: Viewing repository members. Notes: Manage Repository Settings includes: Branch protection rules, name/description, archive, etc. Notes: Manage Repository Members includes: Invite/remove members, modify member permissions.
Code
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View File Content on WEB | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View File Content on WEB | Private | ✔ | ✔ | ✔ | ✔ | |||
| View File Content on WEB | Secret | ✔ | ✔ | |||||
| Modify File Content on WEB | Public | ✔ | ✔ | ✔ | ||||
| Modify File Content on WEB | Private | ✔ | ✔ | ✔ | ||||
| Modify File Content on WEB | Secret | ✔ | ✔ | |||||
| Clone, Pull, Download | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| Clone, Pull, Download | Private | ✔ | ✔ | ✔ | ✔ | |||
| Push | Public | ✔ | ✔ | ✔ | ||||
| Push | Private | ✔ | ✔ | ✔ |
Branch
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View | Private | ✔ | ✔ | ✔ | ✔ | |||
| View | Secret | ✔ | ✔ | |||||
| Create/Delete | Public | ✔ | ✔ | ✔ | ||||
| Create/Delete | Private | ✔ | ✔ | ✔ | ||||
| Create/Delete | Secret | ✔ | ✔ | |||||
| Merge | Public | ✔ | ✔ | ✔ | ||||
| Merge | Private | ✔ | ✔ | ✔ | ||||
| Merge | Secret | ✔ | ✔ | |||||
| Branch Protection Settings | ✔ | ✔ |
Cloud Native Build
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View/Download Build Logs | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View/Download Build Logs | Private | ✔ | ✔ | ✔ | ✔ | |||
| Delete Build Logs | Public | ✔ | ✔ | ✔ | ||||
| Delete Build Logs | Private | ✔ | ✔ | ✔ | ||||
| Trigger/Stop Build | Public | ✔ | ✔ | ✔ | ||||
| Trigger/Stop Build | Private | ✔ | ✔ | ✔ |
Workspace
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| Create Workspace | Public | ✔ | ✔ | ✔ | ||||
| Create Workspace | Private | ✔ | ✔ | ✔ | ||||
| Access Workspace | Public | ✔ | ||||||
| Access Workspace | Private | ✔ |
Issue
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View | Secret | ✔ | ✔ | |||||
| Pinned | Public | ✔ | ✔ | |||||
| Pinned | Private | ✔ | ✔ | |||||
| Pinned | Secret | ✔ | ✔ | |||||
| Create, Comment, Reference | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Create, Comment, Reference | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Create, Comment, Reference | Secret | ✔ | ✔ | |||||
| Handle Issue | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Handle Issue | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Handle Issue | Secret | ✔ | ✔ | |||||
| Edit Title | Public | ✔ | ✔ | ✔ | ||||
| Edit Title | Private | ✔ | ✔ | ✔ | ||||
| Edit Title | Secret | ✔ | ✔ | ✔ | ||||
| Edit Description | Public | ✔ | ✔ | ✔ | ||||
| Edit Description | Private | ✔ | ✔ | ✔ | ||||
| Edit Description | Secret | ✔ | ✔ | ✔ | ||||
| Edit (Assignee, Label, Priority) | Public | ✔ | ✔ | ✔ | ✔ | |||
| Edit (Assignee, Label, Priority) | Private | ✔ | ✔ | ✔ | ✔ | |||
| Edit (Assignee, Label, Priority) | Secret | ✔ | ✔ | |||||
| Close/Reopen | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Close/Reopen | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Close/Reopen | Secret | ✔ | ✔ | ✔ |
Pull Requests
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View | Private | ✔ | ✔ | ✔ | ✔ | |||
| View | Secret | ✔ | ✔ | |||||
| Comment, Reference | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Comment, Reference | Private | ✔ | ✔ | ✔ | ||||
| Comment, Reference | Secret | ✔ | ✔ | |||||
| Create Pull Requests | Public | ✔ | ✔ | ✔ | ||||
| Create Pull Requests | Private | ✔ | ✔ | ✔ | ||||
| Create Pull Requests | Secret | ✔ | ✔ | |||||
| Handle Pull Requests | Public | ✔ | ✔ | ✔ | ||||
| Handle Pull Requests | Private | ✔ | ✔ | ✔ | ||||
| Handle Pull Requests | Secret | ✔ | ✔ | |||||
| Edit Title | Public | ✔ | ✔ | ✔ | ||||
| Edit Title | Private | ✔ | ✔ | ✔ | ||||
| Edit Title | Secret | ✔ | ✔ | ✔ | ||||
| Edit Description | Public | ✔ | ||||||
| Edit Description | Private | ✔ | ||||||
| Edit Description | Secret | ✔ | ||||||
| Edit (Assignee, Reviewer, Labels) | Public | ✔ | ✔ | ✔ | ✔ | |||
| Edit (Assignee, Reviewer, Labels) | Private | ✔ | ✔ | ✔ | ✔ | |||
| Edit (Assignee, Reviewer, Labels) | Secret | ✔ | ✔ | |||||
| Review | Public | ✔ | ✔ | ✔ | ||||
| Review | Private | ✔ | ✔ | ✔ | ||||
| Review | Secret | ✔ | ✔ | |||||
| Merge/approve/request change | Public | ✔ | ✔ | ✔ | ||||
| Merge/approve/request change | Private | ✔ | ✔ | ✔ | ||||
| Merge/approve/request change | Secret | ✔ | ✔ | |||||
| Close/Reopen | Public | ✔ | ✔ | ✔ | ✔ | |||
| Close/Reopen | Private | ✔ | ✔ | ✔ | ||||
| Close/Reopen | Secret | ✔ | ✔ |
Notes: Review includes: Comment, review code, approve, request changes.
Issue, PR Comments
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| Edit Issue Discussion Comments | Public | ✔ | ✔ | ✔ | ||||
| Edit Issue Discussion Comments | Private | ✔ | ✔ | ✔ | ||||
| Edit Issue Discussion Comments | Secret | ✔ | ✔ | ✔ | ||||
| Edit PR Discussion Comments | Public | ✔ | ||||||
| Edit PR Discussion Comments | Private | ✔ | ||||||
| Edit PR Discussion Comments | Secret | ✔ | ||||||
| View comment edit history | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View comment edit history | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View comment edit history | Secret | ✔ | ✔ | |||||
| Hide Discussion Comments | Public | ✔ | ✔ | ✔ | ✔ | |||
| Hide Discussion Comments | Private | ✔ | ✔ | ✔ | ✔ | |||
| Hide Discussion Comments | Secret | ✔ | ✔ | |||||
| Delete Discussion Comments | Public | ✔ | ✔ | ✔ | ||||
| Delete Discussion Comments | Private | ✔ | ✔ | ✔ | ||||
| Delete Discussion Comments | Secret | ✔ | ✔ | ✔ |
Label
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View | Secret | ✔ | ✔ | |||||
| Create/Edit | ✔ | ✔ | ✔ | ✔ | ||||
| Delete | ✔ | ✔ | ✔ | ✔ |
Tag
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View | Private | ✔ | ✔ | ✔ | ||||
| View | Secret | ✔ | ✔ | |||||
| Create | Public | ✔ | ✔ | ✔ | ||||
| Create | Private | ✔ | ✔ | ✔ | ||||
| Create | Secret | ✔ | ✔ | |||||
| Download | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| Download | Private | ✔ | ✔ | ✔ | ||||
| Download | Secret | ✔ | ✔ | |||||
| Delete | Public | ✔ | ✔ | ✔ | ||||
| Delete | Private | ✔ | ✔ | ✔ | ||||
| Delete | Secret | ✔ | ✔ |
Notes: Download includes: Compressed package.
Release Version
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| View | Secret | ✔ | ✔ | |||||
| Create | Public | ✔ | ✔ | ✔ | ||||
| Create | Private | ✔ | ✔ | ✔ | ||||
| Create | Secret | ✔ | ✔ | |||||
| Upload Attachments | Public | ✔ | ✔ | ✔ | ||||
| Upload Attachments | Private | ✔ | ✔ | ✔ | ||||
| Upload Attachments | Secret | ✔ | ✔ | |||||
| Edit | Public | ✔ | ✔ | ✔ | ||||
| Edit | Private | ✔ | ✔ | ✔ | ||||
| Edit | Secret | ✔ | ✔ | |||||
| Delete | Public | ✔ | ✔ | ✔ | ||||
| Delete | Private | ✔ | ✔ | ✔ | ||||
| Delete | Secret | ✔ | ✔ | |||||
| Update Version Description | Public | ✔ | ✔ | ✔ | ||||
| Update Version Description | Private | ✔ | ✔ | ✔ | ||||
| Update Version Description | Secret | ✔ | ✔ | |||||
| Download attachments | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| Download attachments | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Download attachments | Secret | ✔ | ✔ | |||||
| Download source code | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| Download source code | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Download source code | Secret |
Notes: Download attachments excludes: Source code.
Docker/Helm Artifact
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| View/Download | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View/Download | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Create/Upload Version | Public | ✔ | ✔ | ✔ | ||||
| Create/Upload Version | Private | ✔ | ✔ | ✔ | ||||
| Delete Version | ✔ | ✔ | ✔ | |||||
| Delete Artifact | ✔ |
Mission
| Operation | Scenario | Owner | Administrator | Developer | Assistant | Guest | Anonymous | Creator |
|---|---|---|---|---|---|---|---|---|
| Create Mission | ✔ | ✔ | ||||||
| Modify Settings | ✔ | ✔ | ||||||
| Create View | ✔ | ✔ | ||||||
| View View | Public | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | |
| View View | Private | ✔ | ✔ | ✔ | ✔ | ✔ | ||
| Edit View | ✔ | ✔ | ✔ | ✔ | ||||
| Copy Mission | ✔ | ✔ | ✔ | ✔ | ✔ | |||
| Delete Mission | ✔ |
Notes: Modify Settings includes: Basic settings, advanced settings, member management.