Nikhil Soni 86ade5973e feat(promote): authorize promoted paths per signal (#13029) ...

#### Description

- `/api/v1/promoted_path` moves from the legacy
`EditAccess`/`ViewAccess` gates to `CheckResources`. Each signal is
guarded by its existing field resource: `logs-field` for logs,
`traces-field` for traces.
- POST checks `update` on the field resource of every signal named in
the body. A mixed logs+traces request needs both grants.
- GET checks `list` on the signals the `signal`/`context` filters
select. With no filters, or filters that match no domain, it checks all
of them.
- Managed-role grants already exist in the registry (editor/admin
update, viewer list), so nothing changes for managed roles. Migration
131 backfills these tuples for orgs created before the kinds were
registered.
- New `promote` integration suite covers the managed-role matrix and
per-signal scoping with a custom role, including revoke.

#### Additional Information

Stacked on #13021.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-12 05:48:03 +00:00

..

ISSUE_TEMPLATE

chore: update dashboard contributing doc and issue template (#6029)

2024-09-19 18:48:37 +05:30

workflows

feat(promote): authorize promoted paths per signal (#13029)

2026-10-12 05:48:03 +00:00

CODEOWNERS

chore(storybook): replace story-shots scripts with sbshot (#13075)

2026-10-08 18:30:34 +00:00

config.yml

fix: indent spaces in yml (#1657)

2023-02-10 16:41:16 +05:30

pull_request_template.md

chore: simplify PR template and add agent rules (#12457)

2026-08-07 12:39:27 +00:00

release-drafter.yml

adding release-drafter

2021-08-03 01:04:59 +05:30