docs: clarify Data Sources tab permission requirement for custom roles#6327
Closed
dhtclk wants to merge 1 commit into
Closed
docs: clarify Data Sources tab permission requirement for custom roles#6327dhtclk wants to merge 1 commit into
dhtclk wants to merge 1 commit into
Conversation
The Data Sources tab (ClickPipes, data lake integrations, file uploads) is gated on control-plane:service:manage, not control-plane:service:manage-clickpipes. Custom roles built with only the ClickPipes permission won't see the tab. Add notes to the console roles reference and the custom roles guide. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
3 Skipped Deployments
|
Collaborator
Author
|
Closing — opened prematurely. Will revisit. |
|
Docs PR opened: ClickHouse/mintlify-docs-dev#107 Added notes on two Cloud security pages clarifying the Data Sources tab requires the Manage and Delete Selected Services permission. Once this PR is merged, we'll do a second pass to capture any additional changes and update the docs PR. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Adds two
:::noteadmonitions clarifying that the Data Sources tab in the ClickHouse Cloud console is gated oncontrol-plane:service:manage("Manage and Delete Selected Services" in the UI), not oncontrol-plane:service:manage-clickpipes.Custom roles built with only the ClickPipes permission won't see the Data Sources tab, which covers ClickPipes, data lake integrations, and file uploads.
Changes
docs/cloud/reference/09_security/01_console-roles.md— note after the Console Permissions table.docs/cloud/guides/security/01_cloud_access_management/03_manage-custom-roles.md— note inside the permission-scope step, beside the existing:::tip.Notes for reviewers
"Manage and Delete Selected Services"could not be confirmed from the repo (not present in docs text; the permission-picker screenshot only shows top-level categories). Confirm against the live console.🤖 Generated with Claude Code
Note
Low Risk
Documentation-only changes with no runtime, API, or security behavior impact.
Overview
Documents that the Cloud console Data Sources tab (ClickPipes, data lake integrations, file uploads) requires
control-plane:service:manage(“Manage and Delete Selected Services”), not ClickPipes-only permissions.Adds matching
:::noteblocks in the custom roles guide (permission-scope step) and Console roles and permissions reference (after the permissions table), so admins building roles with onlymanage-clickpipesknow why the tab stays hidden.Reviewed by Cursor Bugbot for commit 7c5c734. Bugbot is set up for automated code reviews on this repo. Configure here.