Improve RBAC

[thund3rbrd]

Improve RBAC

With the introduction of the Organization and Project concepts in Langfuse, where multiple users can collaborate on shared project, the current RBAC (Role-Based Access Control) support reveals some limitations. For instance, when you create an organization and set up a default project, you might want to add multiple users with specific roles. However, assigning the "member" role by default allows users to delete resources (e.g., prompts) created by others. On the other hand, if you opt for a more restrictive approach by assigning the "viewer" role, these users are unable to contribute effectively by creating their own resources.

This situation is less than ideal for projects involving multiple participants who need to collaborate and contribute efficiently.

To address this, what if we introduced roles that allow users to perform Create and Read (CR) or Create, Read, and Update (CRU) actions, in addition to the existing roles? Even better, we could empower project or organization owners with the flexibility to define "custom" roles tailored to their specific needs. This would foster a more balanced and effective collaboration environment.

For more details pls refer: https://discord.com/channels/1111061815649124414/1111063198989307964/1277872725263646771

Additional information

No response