Closed
Description
[permissionsToCheck
] (https://github.com/coder/coder/blob/main/site/src/contexts/auth/permissions.tsx#L17) is used to toggle UI elements based on user capabilities (authz checks). These checks are all site wide scoped. In a multi-org setting checks.createTemplates
can be false at a site wide, but be true for some subset of organizations.
UI elements like "Create Template" need to show even if the site wide permission fails.
Ideally we could pass some any
for the organization_id
? So like this maybe? Unsure how this could actually be implemented 🤔
[checks.createTemplates]: {
object: {
resource_type: "template",
organization_id: "any", // Can do in at least 1 organization??
},
action: "update",
},