Skip to content

docs: split data_link and data_link_object permissions (Cloud) #1601

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
georgi-seqera wants to merge 3 commits into
base: master
Choose a base branch
from
+24 −10
Open

docs: split data_link and data_link_object permissions (Cloud) #1601

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
3a7eec0
docs: update roles/grants for new data_link_object and data_link perm…
georgi-seqera Jun 22, 2026
dbd76ff
Apply suggestion from @justinegeffen
justinegeffen Jun 23, 2026
1012027
Merge branch 'master' into gh/data-link-objects-role-update
justinegeffen Jun 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions changelog/seqera-cloud/v26.2.0_cycle61.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
---
title: Seqera Cloud v26.2.0_cycle61

@georgi-seqera georgi-seqera Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@justinegeffen I'm not sure how release notes for Cloud are handled - whether there is something automatic, but am just adding this update for when I would expect the change to be effective in prod.
Let me know if there is some different process I should follow or if you have a preference for how engineers should contribute release note docs.

More details can be found here: https://github.com/seqeralabs/platform/pull/11461#issuecomment-4768592011

date: 2026-06-30
tags: [seqera cloud]
---

## Feature updates and improvements

### Data explorer

- Separated Data Explorer data-link record permissions from file object permissions with the new `data_link_object` grant. Workspace members with **View**, **Connect**, or **Launch** roles can now download files and generate download URLs from data-links. Upload and delete file operations remain restricted to **Maintain** and above.
20 changes: 10 additions & 10 deletions platform-cloud/docs/orgs-and-teams/custom-roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,26 +65,26 @@ Individual permissions grant read, write, execute, admin, or delete access for e
| Permission | Description | API endpoint |
|------------|-------------|--------------|
| **data_link:read** | List all data-links (cloud buckets) | `GET /data-links` |
| | Browse data-link contents | `GET /data-links/{dataLinkId}/browse` |
| | Browse data-link contents at the given path | `GET /data-links/{dataLinkId}/browse/{path}` |
| | View data-link details | `GET /data-links/{dataLinkId}` |
| | Resolve data-link cloud-scheme URLs | _(Used by Platform)_ |
| **data_link:write** | Refresh data-link cache | `GET /data-links/cache/refresh` |
| | Create a custom data-link | `POST /data-links` |
| | Edit data-link metadata | `PUT /data-links/{dataLinkId}` |
| **data_link:delete** | Remove a data-link from workspace | `DELETE /data-links/{dataLinkId}` |
| **data_link:admin** | Hide data-links | _(Used by Platform)_ |
| | Show data-links | _(Used by Platform)_ |
| **data_link_object:read** | Browse data-link contents | `GET /data-links/{dataLinkId}/browse` |
| | Browse data-link contents at the given path | `GET /data-links/{dataLinkId}/browse/{path}` |
| | Browse data-link directory tree | `GET /data-links/{dataLinkId}/browse-tree` |
| | Download files from data-link | `GET /data-links/{dataLinkId}/download/{filePath}` |
| | Generate download URL for data-link files | `GET /data-links/{dataLinkId}/generate-download-url` |
| | Generate download script | `GET /data-links/{dataLinkId}/script/download` |
| | Upload files to data-link | `POST /data-links/{dataLinkId}/upload` |
| | Sign data-link URLs for batch access | _(Used by Platform)_ |
| **data_link_object:write** | Upload files to data-link | `POST /data-links/{dataLinkId}/upload` |
| | Upload files to data-link at the given path | `POST /data-links/{dataLinkId}/upload/{dirPath}` |
| | Complete file upload to data-link | `POST /data-links/{dataLinkId}/upload/finish` |
| | Complete file upload to data-link at the given path | `POST /data-links/{dataLinkId}/upload/finish/{dirPath}` |
| | Create a custom data-link | `POST /data-links` |
| | Edit data-link metadata | `PUT /data-links/{dataLinkId}` |
| | Sign data-link URLs for batch access | _(Used by Platform)_ |
| **data_link:delete** | Delete files from data-link | `DELETE /data-links/{dataLinkId}/content` |
| | Remove a data-link from workspace | `DELETE /data-links/{dataLinkId}` |
| **data_link:admin** | Hide data-links | _(Used by Platform)_ |
| | Show data-links | _(Used by Platform)_ |
| **data_link_object:delete** | Delete files from data-link | `DELETE /data-links/{dataLinkId}/content` |
| **dataset:read** | List datasets (legacy endpoint) | `GET /workspaces/{workspaceId}/datasets` |
| | List workspace dataset versions (legacy endpoint) | `GET /workspaces/{workspaceId}/datasets/versions` |
| | List dataset versions (legacy endpoint) | `GET /workspaces/{workspaceId}/datasets/{datasetId}/versions` |
Expand Down
3 changes: 3 additions & 0 deletions platform-cloud/docs/orgs-and-teams/roles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,6 +71,9 @@ The following table shows which operations are available to the default workspac
| **data_link:write** | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| **data_link:delete** | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| **data_link:admin** | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| **data_link_object:read** | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| **data_link_object:write** | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| **data_link_object:delete** | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
| **dataset:read** | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| **dataset:write** | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ |
| **dataset:delete** | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Expand Down
Loading