hiveiq-src/hiveops-guide
4
0
Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases Wiki Activity

Guide: dev audience tier leaks to MSP_ADMIN — should be BCOS-only #18

New Issue
Closed
opened 2026-07-14 18:49:24 -04:00 by hiveiq · 0 comments
hiveiq commented 2026-07-14 18:49:24 -04:00
Owner
Copy Link
Copy Source

Follow-up to #16.

Problem

The dev audience tier is named for developers but MarkdownGuideService.visible() gates it through isInternal() = ROLE_MSP_ADMIN || ROLE_BCOS_ADMIN. So every MSP_ADMIN (a customer's service-provider admin) can read all dev-tagged content: per-service architecture (technical.* Overview), platform internals (platform.topology, platform.gotchas, platform.service-ownership, ...), agent-module internals, and dev Overview/Internal tabs.

#16 moved only Architect + Claude to bcos. The rest of the dev tier still leaks.

Decision (Johannes)

dev becomes BCOS_ADMIN-only, EXCEPT Testing, which stays MSP-visible.

Fix

  1. Code: in visible(), map dev to includeBcos (was includeInternal). internal stays MSP+BCOS.
  2. Content: retag the 66 Testing docs from audience: dev to audience: internal so MSP keeps them.

Resulting MSP_ADMIN visibility

  • Keeps: Customer, Internal (internal-tier), Testing.
  • Loses: Architect, Claude, dev-Internal, dev-Overview, and the technical.* / platform.* / agent.* / devops.* Overviews.

Scope

Guide is bcos.dev only; not in production. No prod change.

Follow-up to #16. ## Problem The `dev` audience tier is named for developers but `MarkdownGuideService.visible()` gates it through `isInternal()` = `ROLE_MSP_ADMIN || ROLE_BCOS_ADMIN`. So every MSP_ADMIN (a customer's service-provider admin) can read all `dev`-tagged content: per-service architecture (`technical.*` Overview), platform internals (`platform.topology`, `platform.gotchas`, `platform.service-ownership`, ...), agent-module internals, and dev Overview/Internal tabs. #16 moved only Architect + Claude to `bcos`. The rest of the `dev` tier still leaks. ## Decision (Johannes) `dev` becomes **BCOS_ADMIN-only**, EXCEPT Testing, which stays MSP-visible. ## Fix 1. Code: in `visible()`, map `dev` to `includeBcos` (was `includeInternal`). `internal` stays MSP+BCOS. 2. Content: retag the 66 `Testing` docs from `audience: dev` to `audience: internal` so MSP keeps them. ## Resulting MSP_ADMIN visibility - Keeps: Customer, Internal (internal-tier), Testing. - Loses: Architect, Claude, dev-Internal, dev-Overview, and the `technical.*` / `platform.*` / `agent.*` / `devops.*` Overviews. ## Scope Guide is bcos.dev only; not in production. No prod change.
hiveiq added the Security
Priority
High
 labels 2026-07-14 18:49:24 -04:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Bug
Backend
Service, API, or data-layer work
 Breaking
Breaking change that won't be backward compatible
 Bug
Something is not working
 Dev Verified
Fix verified on bcos.dev by QA — cleared for production release
 Documentation
Documentation changes
 Enhancement
Improve existing functionality
 Feature
New functionality
 Frontend
UI / Svelte SPA work
 Pattern
For changes to our agent Pattern for detecting hardware faults
Priority
Critical
The priority is critical
Priority
High
The priority is high
Priority
Low
The priority is low
Priority
Medium
The priority is medium
Reopen
Fix was verified but the issue persists or regressed. Reopen and reassign for investigation.
Reviewed
Confirmed
Issue has been confirmed
Reviewed
Duplicate
This issue or pull request already exists
Reviewed
Invalid
Invalid issue
Reviewed
Won't Fix
This issue won't be fixed
Security
This is security issue
Status
Abandoned
Somebody has started to work on this but abandoned work
Status
Blocked
Something is blocking this issue or pull request
Status
Need More Info
Feedback is required to reproduce issue or to continue work
TEST
Tested
Not Fixed
Testing
Issue or pull request related to testing
 Verify Fix
Fix has been deployed to production. Verify the issue is resolved before closing.
 Verify/Production
Fix deployed to production — verify before closing
No Label
Priority
High
 Security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
hiveiq hiveiq-browser johannes tristan (Tristan Smith)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: hiveiq-src/hiveops-guide#18
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?