Unleash / unleash / 20778194559 / 1

86%

master: 91%

push

github

chore: create Reader project role (#11178)

https://linear.app/unleash/issue/2-4100/create-reader-project-role

Adds a new Reader predefined project role.

We will need this to solve the issue where read only users should have
explicit read only access to private projects, since in order to have
access to private projects, you need a project role. Reader is a role
with no permissions, so it still matches our RO business rules and allow
you to qualify as a RO user, while allowing you to add that user to
private projects.

Since we had a unique constraint on the role name, and it's possible
that customer instances have a custom role called "Reader", I dropped
that unique constraint and instead added a unique constraint on name +
type. That way you only need to have unique names if they have the same
type.

<img width="1000" height="581" alt="image"
src="https://github.com/user-attachments/assets/a42934cd-627d-41a8-be81-f1916d1d89f6"
/>

<img width="461" height="764" alt="image"
src="https://github.com/user-attachments/assets/9599693d-5234-4446-a431-23cb8aa06c65"
/>

---------

Co-authored-by: Gastón Fournier <gaston@getunleash.io>

1686 of 1895 branches covered (88.97%)

14241 of 16526 relevant lines covered (86.17%)

863.33 hits per line