feat: Granular permissions for custom fields #9

Open
opened 2026-05-08 04:39:16 +00:00 by jmiller · 0 comments
Owner

Add per-field permission controls so admins can restrict who can view or edit specific custom fields.

Use Cases

  • Client-facing fields visible to clients but not editable
  • Internal scoring fields hidden from non-staff
  • Compliance fields only editable by admins
  • Billing fields restricted to finance team

Proposed Permission Levels

Level Can View Can Edit
Public Anyone with repo access Anyone with write access
Restricted Anyone with repo access Only admins/owners
Private Only admins/owners Only admins/owners

Implementation

  • Add visibility and edit_permission columns to custom_field_definition
  • Check permissions in API and web handlers before showing/saving
  • UI: show lock icon on restricted fields
  • API: filter fields based on caller's permission level

Dependencies

  • Custom fields feature (done)
  • Org-level and system-wide fields (done)
Add per-field permission controls so admins can restrict who can view or edit specific custom fields. ## Use Cases - Client-facing fields visible to clients but not editable - Internal scoring fields hidden from non-staff - Compliance fields only editable by admins - Billing fields restricted to finance team ## Proposed Permission Levels | Level | Can View | Can Edit | |-------|----------|----------| | Public | Anyone with repo access | Anyone with write access | | Restricted | Anyone with repo access | Only admins/owners | | Private | Only admins/owners | Only admins/owners | ## Implementation - Add `visibility` and `edit_permission` columns to `custom_field_definition` - Check permissions in API and web handlers before showing/saving - UI: show lock icon on restricted fields - API: filter fields based on caller's permission level ## Dependencies - Custom fields feature (done) - Org-level and system-wide fields (done)
jmiller added the type: feature label 2026-05-11 17:08:57 +00:00
Sign in to join this conversation.
No labels type: feature
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: MokoConsulting/MokoGitea#9