Nicolas FratiandMisha Bragin 3e2ed39de9 [management] Let usage_viewer read Agent Network access logs (#7750) (#7885) ...

usage_viewer saw account-wide usage but only its own request logs, so
the people reviewing cost could not drill into the requests behind it.
The role now also holds Read on agent_network.logs, which makes the
access-log and session endpoints return every caller's rows instead of
self-scoping. Logs can contain captured prompts, so this widens what the
role exposes; policies, guardrails, budgets and settings stay hidden.


(cherry picked from commit 82e5428c2f)

Co-authored-by: Misha Bragin <bangvalo@gmail.com>

2026-10-01 00:51:47 +02:00

..

modules

[management] Resolve agent network permissions per submodule (#7030)

2026-08-03 12:45:17 +02:00

operations

[management] permissions manager use crud operations (#3690)

2025-04-16 17:25:03 +02:00

roles

[management] Let usage_viewer read Agent Network access logs (#7750) (#7885)

2026-10-01 00:51:47 +02:00

agent_network_roles_test.go

[management] Let usage_viewer read Agent Network access logs (#7750) (#7885)

2026-10-01 00:51:47 +02:00

manager_mock.go

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00

manager_test.go

[management] Resolve agent network permissions per submodule (#7030)

2026-08-03 12:45:17 +02:00

manager.go

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00