Fine-grained developer permissions
Feature request: User group: delete permissions (clearing table/rows) - helps to onboard more personnel on growing projects with different trust profiles. I understand snapshot exports help in this regard right now and that's great! Probably more down the line we could see line item activity of what team members have done in Convex.
3 Replies
Makes sense. some things are underway here, I can share more
1. Eventually the model would be development deployments are per-member, and so members would have full permissions to do anything they want there. The production deployment would eventually have some sort of permission levels on it with different roles (admin vs. non). This is pretty vague right now because we haven't designed nor roadmapped it, so we'd love input on it
2. Audit logs are already on our roadmap! So at least there would be a trail of changes to the deployment (code pushes, dashboard edits, etc) to keep accountability on who had done what
so our current plan is audit logs would land first, and we'd figure out proper roles etc a little further down the road.
Fantastic, yes I noticed audit logs on the roadmap on the /plans page after asking here. That would be sufficient to our use case. Thank you.
In terms of development deployments we're familiar with this workflow already. We use Knock.app for our notifications infrastructure and they have this development-production deployments very well silo'd. I'd recommend checking out their UX/UI on that.
Under Development/Production, can see commits from all members and permissioned push to production
