Skip to content

Conversation

@sabulous
Copy link
Contributor

@sabulous sabulous commented Nov 14, 2025

Description

Closes PLAT-3940.

  • Removes explicit role checks through /permissions endpoint.

No behavior change is expected for the predefined roles.

Testing

  • Check tw --insecure info to see preliminary configuration is correct.
  • Set TOWER_API_ENDPOINT=http://localhost:8000/api and `TOWER_ACCESS_TOKEN=<YOUR_API_TOKEN>
  • Test tw --insecure launch --labels <a_new_label_that_does_not_exist_in_wsp> -w <ORG_NAME>/<WS_NAME> <PIPELINE_NAME> with different predefined roles

@sabulous sabulous requested review from swampie and tcrespog November 14, 2025 12:30
Copy link
Contributor

@tcrespog tcrespog left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested and works as expected (the BE side returns a 403 Forbidden error when executing a launch with new labels attached).

@sabulous sabulous marked this pull request as ready for review November 17, 2025 08:52
@sabulous sabulous merged commit 570aae6 into master Nov 19, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants