Ruben Fiszel f8e0dfb045 add comprehensive permissions tests and restrict operator script archiving ...

- Add permissions test suite covering scripts, flows, apps, resources,
  variables, schedules, and folder-based permissions
- Add test for operator restrictions (cannot create/update/archive)
- Restrict operators from archiving scripts (archive_script_by_path,
  archive_script_by_hash) for security consistency with flows/apps

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-25 23:33:54 +00:00

..

mcp

feat(mcp): handle server oauth (#7585)

2026-01-20 19:19:21 +00:00

triggers

feat: v2 job debouncing (#7411)

2025-12-23 13:24:04 +00:00

agent_workers_oss.rs

fix(backend): concurrency limits preprocessor (#6727)

2025-10-02 20:31:31 +00:00

ai.rs

feat(ai): handle google vertex for claude models + base url overrides (#7654)

2026-01-22 17:28:51 +00:00

approvals.rs

feat: allow resume urls at flow level for pre-generation (#7582)

2026-01-15 08:56:09 +00:00

apps_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

apps.rs

fix: tighten operator permissions

2026-01-24 19:37:25 +00:00

args.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

assets.rs

Specific asset tables (#7323)

2025-12-11 13:34:17 +00:00

audit.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

auth.rs

count external jwts for telemetry

2025-11-18 23:03:35 +00:00

azure_proxy_oss.rs

feat: DuckDB support write to Azure (#7618)

2026-01-20 12:52:58 +00:00

bedrock.rs

feat(ai): support IAM auth for bedrock provider (#7379)

2025-12-16 22:00:14 +00:00

capture.rs

feat(backend): pass all headers and query to webhook preprocessor (#6931)

2025-10-24 19:40:44 +00:00

concurrency_groups.rs

feat(api): add include_args query parameter to job list endpoints

2026-01-19 21:42:10 +00:00

configs.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

db.rs

refactor: replace v2 live migration with regular SQL migration (#7678)

2026-01-25 22:32:21 +00:00

debug.rs

feat: debuggers for python and bun v0 (#7546)

2026-01-13 15:20:06 +00:00

drafts.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

ee_oss.rs

count external jwts for telemetry

2025-11-18 23:03:35 +00:00

embeddings.rs

feat: hub actions and better search (#7056)

2025-11-05 11:10:48 +00:00

favorite.rs

remove unecessary postgres transactions and improve performance

2023-08-22 00:34:44 +02:00

flow_conversations.rs

feat(app): add chat component (#7199)

2025-11-24 17:39:35 +00:00

flows.rs

fix: tighten operator permissions

2026-01-24 19:37:25 +00:00

folder_history.rs

fix: add history directly viewable in folder/group viewer (#7365)

2025-12-15 18:01:07 +00:00

folders.rs

nit tightening

2026-01-11 09:30:07 +00:00

git_sync_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

granular_acls.rs

fix: add history directly viewable in folder/group viewer (#7365)

2025-12-15 18:01:07 +00:00

group_history.rs

nit

2025-12-15 20:35:51 +00:00

groups.rs

feat: add workspace setting to disable error handler for u/ scripts/flows (#7634)

2026-01-24 19:26:06 +00:00

indexer_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

inkeep_oss.rs

feat(mcp): add documentation endpoint (#7331)

2025-12-10 17:28:56 +00:00

inputs.rs

improve search perfs

2025-03-13 09:31:38 +01:00

integration.rs

feat: private hub (#3491)

2024-04-04 04:16:53 +02:00

job_helpers_oss.rs

fix ci oss (#7636)

2026-01-20 21:58:41 +01:00

job_metrics.rs

backend: use v2 tables through views where possible (v2 phase 3) (#5119)

2025-02-06 12:43:24 +01:00

jobs_export.rs

nits jobs migration command

2025-12-01 15:16:22 +01:00

jobs.rs

Playwright E2E (#7520)

2026-01-22 16:20:01 +00:00

lib.rs

feat: better mixed versions handling (#7628)

2026-01-22 23:16:57 +00:00

live_migrations.rs

refactor: replace v2 live migration with regular SQL migration (#7678)

2026-01-25 22:32:21 +00:00

mcp_oauth_oss.rs

feat(aiagent): handle oauth for mcp tools (#7564)

2026-01-14 12:06:40 +00:00

npm_proxy.rs

feat: add private npm registry proxy support for ATA in webide (#7597)

2026-01-17 10:44:30 +00:00

oauth2_oss.rs

split oauth into separate crate

2026-01-09 07:03:29 +00:00

oidc_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

openapi.rs

feat: http routes streaming (#6834)

2025-10-17 14:05:17 +00:00

public_app_layer.rs

feat(aiagent): handle oauth for mcp tools (#7564)

2026-01-14 12:06:40 +00:00

raw_apps.rs

fix: tighten operator permissions

2026-01-24 19:37:25 +00:00

resources.rs

feat: add HashiCorp Vault secret storage integration (#7599)

2026-01-18 23:08:29 +00:00

s3_proxy_oss.rs

fix s3 proxy dev build (#6535)

2025-09-04 22:05:22 +00:00

saml_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

schedule.rs

fix: improve jobs runs page performance (#6942)

2025-10-27 14:29:53 +00:00

scim_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

scopes.rs

feat(backend): flow streaming (#6520)

2025-09-18 15:49:35 +00:00

scripts.rs

add comprehensive permissions tests and restrict operator script archiving

2026-01-25 23:33:54 +00:00

secret_backend_ext.rs

feat: add HashiCorp Vault secret storage integration (#7599)

2026-01-18 23:08:29 +00:00

service_logs.rs

feat: add aws oidc support for instance s3 storage (#5810)

2025-05-25 14:03:38 +02:00

settings.rs

fix: azure read s3 proxy (#7641)

2026-01-21 11:42:25 +00:00

slack_approvals.rs

feat: Better tracing for audit logs, including a graph to visualize them (#6078)

2025-07-03 21:02:45 +00:00

smtp_server_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

static_assets.rs

fix static assets loading for apps raw

2025-12-25 16:29:49 +00:00

stripe_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_approvals_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_cache_oss.rs

fix: teams api improvements (#6643)

2025-09-19 17:43:16 +00:00

teams_oss.rs

fix: teams api improvements (#6643)

2025-09-19 17:43:16 +00:00

token.rs

feat: email triggers (#6548)

2025-09-09 21:04:23 +00:00

tracing_init.rs

nit

2025-09-11 21:57:56 +00:00

users_oss.rs

feat: add password reset flow using configured SMTP settings (#7525)

2026-01-09 10:31:56 +00:00

users.rs

feat: add workspace setting to disable error handler for u/ scripts/flows (#7634)

2026-01-24 19:26:06 +00:00

utils.rs

Advanced S3 permissionning (#6617)

2025-09-17 12:15:33 +00:00

var_resource_cache.rs

add variable caching api

2025-09-02 14:34:46 +00:00

variables.rs

feat: add HashiCorp Vault secret storage integration (#7599)

2026-01-18 23:08:29 +00:00

webhook_util.rs

feat: allow optionally forcing ipv4 for reqwest (#6883)

2025-10-21 15:46:41 +00:00

workers.rs

fix: add HIDE_WORKERS_FOR_NON_ADMINS env var and workspace-scoped custom_tags endpoint (#7613)

2026-01-19 19:14:18 +00:00

workspace_dependencies.rs

fix(workspace-dependencies): implement better caching (#7273)

2025-12-02 12:48:14 +00:00

workspaces_export.rs

feat: add workspace setting to disable error handler for u/ scripts/flows (#7634)

2026-01-24 19:26:06 +00:00

workspaces_extra.rs

fix: make workspace id change faster and add 100k jobs limit (#7500)

2026-01-06 18:07:51 +00:00

workspaces_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

workspaces.rs

feat: add workspace setting to disable error handler for u/ scripts/flows (#7634)

2026-01-24 19:26:06 +00:00