From acda3697c5a2c11fdd25118149b3a7e878f5651c Mon Sep 17 00:00:00 2001 From: Leslie Lau Date: Fri, 20 Feb 2026 11:26:14 -0500 Subject: [PATCH 1/2] Remove some unused permissions --- docs/platform/security-and-guardrails/permissions.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/docs/platform/security-and-guardrails/permissions.md b/docs/platform/security-and-guardrails/permissions.md index e8a9e052..333dd55d 100644 --- a/docs/platform/security-and-guardrails/permissions.md +++ b/docs/platform/security-and-guardrails/permissions.md @@ -108,12 +108,10 @@ All actions affecting **Production Environments** are restricted for roles below | `organization:write:members` | | | | | ✅ | ✅ | | `organization:read:billing` | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | `organization:write:billing` | | | | | | ✅ | -| `organization:read:projects` | | | ✅ | | ✅ | ✅ | | `project:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `project:write` | | | | | ✅ | | | `project:write:settings` | | | | ✅ | ✅ | | | `project:delete` | | | | | ✅ | | -| `feature:read:staleness` | ✅ | | | ✅ | ✅ | | | `feature:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `feature:write` | | ✅ | ✅ | ✅ | ✅ | | | `feature:publish` | | | ✅ | ✅ | ✅ | | @@ -128,7 +126,6 @@ All actions affecting **Production Environments** are restricted for roles below | `audience:delete` | | | | ✅ | ✅ | | | `variable:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `variable:write` | | ✅ | ✅ | ✅ | ✅ | | -| `variable:write:prod` | | | ✅ | | ✅ | | | `environment:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `environment:write` | | ✅ | ✅ | ✅ | ✅ | | | `environment:delete` | | | | ✅ | ✅ | | @@ -149,11 +146,9 @@ All actions affecting **Production Environments** are restricted for roles below | `metricassociation:write` | | ✅ | ✅ | ✅ | ✅ | | | `metricassociation:delete` | | ✅ | ✅ | ✅ | ✅ | | | `project:read:overrides` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `project:write:overrides` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `webhook:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `webhook:write` | | ✅ | ✅ | ✅ | ✅ | | | `webhook:delete` | | | ✅ | ✅ | ✅ | | -| `project:read:tokens` | ✅ | | | | ✅ | | | `project:write:tokens` | | | | | ✅ | | --- From a2f2d35ae911a5bf7befe558e45c6765826e7427 Mon Sep 17 00:00:00 2001 From: Leslie Lau Date: Fri, 20 Feb 2026 11:56:18 -0500 Subject: [PATCH 2/2] Remove more permissions --- .../security-and-guardrails/permissions.md | 24 ------------------- 1 file changed, 24 deletions(-) diff --git a/docs/platform/security-and-guardrails/permissions.md b/docs/platform/security-and-guardrails/permissions.md index 333dd55d..031322f2 100644 --- a/docs/platform/security-and-guardrails/permissions.md +++ b/docs/platform/security-and-guardrails/permissions.md @@ -105,9 +105,7 @@ All actions affecting **Production Environments** are restricted for roles below | `organization:read:settings` | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | `organization:write:settings` | | | | | ✅ | ✅ | | `organization:read:members` | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| `organization:write:members` | | | | | ✅ | ✅ | | `organization:read:billing` | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | -| `organization:write:billing` | | | | | | ✅ | | `project:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `project:write` | | | | | ✅ | | | `project:write:settings` | | | | ✅ | ✅ | | @@ -116,13 +114,8 @@ All actions affecting **Production Environments** are restricted for roles below | `feature:write` | | ✅ | ✅ | ✅ | ✅ | | | `feature:publish` | | | ✅ | ✅ | ✅ | | | `feature:delete` | | | | ✅ | ✅ | | -| `feature:status:archive` | | ✅ | ✅ | ✅ | ✅ | | -| `feature:status:complete` | | | ✅ | ✅ | ✅ | | -| `feature:read:config` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `feature:write:config` | | ✅ | ✅ | ✅ | ✅ | | | `audience:write` | | ✅ | ✅ | ✅ | ✅ | | | `audience:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `audience:write:prod` | | | ✅ | ✅ | ✅ | | | `audience:delete` | | | | ✅ | ✅ | | | `variable:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `variable:write` | | ✅ | ✅ | ✅ | ✅ | | @@ -132,24 +125,7 @@ All actions affecting **Production Environments** are restricted for roles below | `variation:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | | `variation:write` | | ✅ | ✅ | ✅ | ✅ | | | `variation:delete` | | ✅ | ✅ | ✅ | ✅ | | -| `results:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `user:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `user:write` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `auditlog:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `customproperty:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `customproperty:write` | | ✅ | ✅ | ✅ | ✅ | | -| `customproperty:delete` | | ✅ | ✅ | ✅ | ✅ | | -| `metric:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `metric:write` | | ✅ | ✅ | ✅ | ✅ | | -| `metric:delete` | | ✅ | ✅ | ✅ | ✅ | | -| `metricassociation:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `metricassociation:write` | | ✅ | ✅ | ✅ | ✅ | | -| `metricassociation:delete` | | ✅ | ✅ | ✅ | ✅ | | | `project:read:overrides` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `webhook:read` | ✅ | ✅ | ✅ | ✅ | ✅ | | -| `webhook:write` | | ✅ | ✅ | ✅ | ✅ | | -| `webhook:delete` | | | ✅ | ✅ | ✅ | | -| `project:write:tokens` | | | | | ✅ | | ---