Repository navigation
Conversation
Explains how base levels, permission sets and custom permissions combine, walks admins through granting each, and lists the permissions every page needs, with the Data Hub broken down per tab. Linked from the Security reference and the getting-started guide. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
A diff confined to files no check reads, to the outreach site, or to unit tests now runs only the checks that can reach it instead of the full `pnpm check`. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Admins asking which permissions a page needs, the Data Hub especially, now have a guide that answers it, and agents no longer run the full
pnpm checkfor changes it cannot reach.Changes
finishing-changesnow scopes the checks to what a diff can break: nothing for files no check reads (agent docs, editor config, READMEs), the pull request's CI run for workflow files, the outreach lint and build for/docs,/blogandapps/outreach, andpnpm lintwithpnpm test:coveragefor unit-test-only diffs. The rootAGENTS.mdrule defers to the skill.Decisions
/docsand/blogare not exempt from checks, sinceastro checkinpnpm lintreads them; they run the outreach lint and build instead.Risks
opening-prstill requirespnpm check: greenin the PR body, so a scoped-down change still needs the full run before a PR. That skill is not changed here.Notes
Every permission in the guide was read from
apps/web/src/hooks/useNavItems.ts, the API's@RouteAccessdeclarations, the hooks each Data Hub route calls, andAbilityFactory. The outreach build renders the new page and the links to it.Adversarial review
Reviewed at commit 71abd68. pnpm check: green.
Findings
CLEAN
Attestation
I, Claude Opus 5.5, attest that the review block above reports the adversarial review as it ran on the commit named, with every finding it returned.
🤖 Generated with Claude Code