opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-10-31 11:02:50 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: add chat model config RBAC resource (#27957)

Browse Source 
Add the `chat_model_config` RBAC resource, actions, and API key scopes.
This layer includes the scope migration and generated API types. Model
list queries apply token scopes, SQL authorization filters, and row
ACLs.

Write and default-management handlers keep deployment configuration
authorization until the next API layer replaces it.

Depends on #27956

_This pull request description was generated by Coder Agents._
This commit is contained in:
Ethan
2026-08-24 09:43:45 +00:00
committed by GitHub
parent ac41b5b4f9
commit cbe24a3da5
39 changed files with 1190 additions and 149 deletions
Download Patch File Download Diff File Expand all files Collapse all files
coderd/database/models.go
Generated
+23 -2
View File
@@ -529,6 +529,12 @@ const (
ApiKeyScopeMcpServerConfigUpdate APIKeyScope = "mcp_server_config:update"
ApiKeyScopeMcpServerConfigDelete APIKeyScope = "mcp_server_config:delete"
ApiKeyScopeMcpServerConfigShare APIKeyScope = "mcp_server_config:share"
ApiKeyScopeChatModelConfig APIKeyScope = "chat_model_config:*"
ApiKeyScopeChatModelConfigCreate APIKeyScope = "chat_model_config:create"
ApiKeyScopeChatModelConfigRead APIKeyScope = "chat_model_config:read"
ApiKeyScopeChatModelConfigUpdate APIKeyScope = "chat_model_config:update"
ApiKeyScopeChatModelConfigDelete APIKeyScope = "chat_model_config:delete"
ApiKeyScopeChatModelConfigShare APIKeyScope = "chat_model_config:share"
)
func (e *APIKeyScope) Scan(src interface{}) error {
@@ -809,7 +815,13 @@ func (e APIKeyScope) Valid() bool {
ApiKeyScopeMcpServerConfigRead,
ApiKeyScopeMcpServerConfigUpdate,
ApiKeyScopeMcpServerConfigDelete,
ApiKeyScopeMcpServerConfigShare:
ApiKeyScopeMcpServerConfigShare,
ApiKeyScopeChatModelConfig,
ApiKeyScopeChatModelConfigCreate,
ApiKeyScopeChatModelConfigRead,
ApiKeyScopeChatModelConfigUpdate,
ApiKeyScopeChatModelConfigDelete,
ApiKeyScopeChatModelConfigShare:
return true
}
return false
@@ -1059,6 +1071,12 @@ func AllAPIKeyScopeValues() []APIKeyScope {
ApiKeyScopeMcpServerConfigUpdate,
ApiKeyScopeMcpServerConfigDelete,
ApiKeyScopeMcpServerConfigShare,
ApiKeyScopeChatModelConfig,
ApiKeyScopeChatModelConfigCreate,
ApiKeyScopeChatModelConfigRead,
ApiKeyScopeChatModelConfigUpdate,
ApiKeyScopeChatModelConfigDelete,
ApiKeyScopeChatModelConfigShare,
}
}
@@ -3613,6 +3631,7 @@ const (
ResourceTypeOauth2ProviderSettings ResourceType = "oauth2_provider_settings"
ResourceTypeChatInstructionSettings ResourceType = "chat_instruction_settings"
ResourceTypeMCPServerConfig ResourceType = "mcp_server_config"
ResourceTypeChatModelConfig ResourceType = "chat_model_config"
)
func (e *ResourceType) Scan(src interface{}) error {
@@ -3689,7 +3708,8 @@ func (e ResourceType) Valid() bool {
ResourceTypeUserAIBudgetOverride,
ResourceTypeOauth2ProviderSettings,
ResourceTypeChatInstructionSettings,
ResourceTypeMCPServerConfig:
ResourceTypeMCPServerConfig,
ResourceTypeChatModelConfig:
return true
}
return false
@@ -3735,6 +3755,7 @@ func AllResourceTypeValues() []ResourceType {
ResourceTypeOauth2ProviderSettings,
ResourceTypeChatInstructionSettings,
ResourceTypeMCPServerConfig,
ResourceTypeChatModelConfig,
}
}