mlsmaycon c995d89830 Redact provider connection config for read-only viewers and canonicalize Bedrock ids in setup ...

The provider read grant now serves usage_viewer the display surface only:
the manager blanks upstream URL, operator-typed header values, identity
header names, and the TLS override for callers holding read without
update. The me/setup model intersection compares declared ids through the
same normalization the proxy's parser applies, so a Bedrock declaration
in region/version form still advertises when its canonical id is
allowlisted. Docs and comments now say account-wide for the logs
exclusion and describe the real group source shared with enforcement.

2026-08-27 08:07:20 +00:00

..

admin.go

[management] permissions manager use crud operations (#3690)

2025-04-16 17:25:03 +02:00

agent_network_admin.go

[management] Fix agent_network_admin account read and serve own usage overview

2026-08-18 13:02:02 +00:00

auditor.go

[management] Auditor role (#3721)

2025-04-25 15:04:25 +01:00

billing_admin.go

[management] Add Agent Network access roles and self-service endpoints

2026-08-15 17:54:52 +00:00

network_admin.go

[management, infrastructure, idp] Simplified IdP Management - Embedded IdP (#5008)

2026-01-07 14:52:32 +01:00

owner.go

[management] permissions manager use crud operations (#3690)

2025-04-16 17:25:03 +02:00

role_permissions.go

[management] Add Agent Network access roles and self-service endpoints

2026-08-15 17:54:52 +00:00

usage_viewer.go

Redact provider connection config for read-only viewers and canonicalize Bedrock ids in setup

2026-08-27 08:07:20 +00:00

user.go

[management] permissions manager use crud operations (#3690)

2025-04-16 17:25:03 +02:00