mirror of
https://github.com/supabase/supabase.git
synced 2026-09-06 09:59:03 +08:00
2681a21f5c
Add a guide that compares classic and scoped personal access tokens, explains how account roles constrain token permissions, and walks through creating and testing a project-scoped token. Include generated tables mapping permissions to Management API endpoints and MCP tools, and link the guide from docs navigation and Studio token sheets. Move the scoped-token permission catalog from Studio into shared-data. Studio and docs generation now share permission names, categories, descriptions, risk metadata, modes, scopes, and display order. Generate the tables from the shared catalog, OpenAPI x-fga-permissions, and the downloaded MCP permission map. Exclude Workers permissions until the feature is live. Run regeneration through the docs Makefile, verify checked-in output in CI, and refresh it in the weekly Management API workflow. Add Dashboard and Docs ownership plus contributor guidance so permission changes stay synchronized.
36 lines
1.7 KiB
JSON
36 lines
1.7 KiB
JSON
{
|
|
"list_organizations": [["organizations_read"]],
|
|
"get_organization": [["organization_admin_read"]],
|
|
"list_projects": [["projects_read"]],
|
|
"get_project": [["project_admin_read"]],
|
|
"create_project": [["organization_projects_create"]],
|
|
"pause_project": [["project_admin_write"]],
|
|
"restore_project": [["project_admin_write"]],
|
|
"list_branches": [["branching_development_read"], ["branching_production_read"]],
|
|
"create_branch": [["branching_development_create"], ["branching_production_create"]],
|
|
"delete_branch": [["branching_production_delete"], ["branching_development_delete"]],
|
|
"merge_branch": [["branching_production_write"], ["branching_development_write"]],
|
|
"reset_branch": [["branching_production_write"], ["branching_development_write"]],
|
|
"rebase_branch": [["branching_production_write"], ["branching_development_write"]],
|
|
"execute_sql": [["database_read"]],
|
|
"list_tables": [["database_read"]],
|
|
"list_extensions": [["database_read"]],
|
|
"list_migrations": [["database_migrations_read"]],
|
|
"apply_migration": [["database_migrations_write"]],
|
|
"get_logs": [["analytics_logs_read"]],
|
|
"query_logs": [["analytics_logs_read"]],
|
|
"get_advisors": [["advisors_read"]],
|
|
"generate_typescript_types": [["database_read"]],
|
|
"get_project_url": [["project_admin_read"]],
|
|
"get_publishable_keys": [["api_gateway_keys_read"]],
|
|
"list_edge_functions": [["edge_functions_read"]],
|
|
"get_edge_function": [["edge_functions_read"]],
|
|
"deploy_edge_function": [["edge_functions_write"]],
|
|
"get_storage_config": [["storage_config_read"]],
|
|
"update_storage_config": [["storage_config_write"]],
|
|
"list_storage_buckets": [["storage_read"]],
|
|
"get_cost": [["organization_admin_read", "projects_read"]],
|
|
"confirm_cost": [[]],
|
|
"search_docs": [[]]
|
|
}
|