​
Permissions

Permissions allow for the management of read/write access to various features of webapp.io. Permissions can be managed for the members of your organization through the members section of organization settings. Permissions are a hierarchy of keywords separated by periods (.) using star (*) as a wildcard.

​
Examples:

settings.billing.tier equates to the organziation billing tier setting permission. settings.* equates to all organziation settings permissions. * equates to all permissions.

​
Dashboard

Access to view the organization dashboard (recent commits, custom domains, new installations, organization settings) is managed thorugh the dashboard keyword.

​
Install

Access to install webapp.io on new repositories is managed through the install keyword.

​
Repository

Access to perform actions on repositories is managed the the repo keyword. Access to perform actions on a specific repository is managed through the repo.<reposirory name> keyword. Repository names are lower cased and have both spaces and periods replaced with dashes(-). For example, a repository helloWorld/my first.program is normalized to helloWorld/my-first-program

​
Staging Terminal

Access to the debugging terminal of a staging server is managed through the repo.<reposirory name>.stagingterm keyword.

​
Repository Controls

Repository controls are managed through the controls keyword with the following permissions:
  • repo.<reposirory name>.controls.retry the ability to retry a run
  • repo.<reposirory name>.controls.cancel the ability to cancel a run
  • repo.<reposirory name>.controls.button the ability to click buttons defined in Layerfiles

​
Secrets

Access to read and write secrets is managed though the secrets keyword.

​
Settings

Access to read and write organization settings are managed through the settings keyword.

​
Membership

Organization membership management has the following permissions:
  • settings.members.roles alter member roles
  • settings.members.users alter organization’s users
  • settings.members.users.invite invite users to organization

​
Billing

Organization billing settings have the following permissions:
  • settings.billing.tier manage organization billing tier
  • settings.billing.payment manage organization payment method

​
Groups

An organization has two role groups by default, owners and members. Owners have read/write access to all parts of the organization, members have a subset. Members start with the default permissions of:
  • dashboard
  • repo.*.controls.cancel
  • repo.*.controls.retry
  • repo.*.controls.stagingterm
Permissions can be granted to role groups in the members section of organization settings. To add additional role groups contact support at [email protected].