permissions

Q&A permissions

Q&A plugin is utilizing Backstage permissions framework. Using the framework is optional but if you want to define who can read questions or post new questions or answers, follow this guide.

The default permissions are hard-coded. This means if you are not using permissions framework in your installation. These include:

• Only author can edit and delete own posts
• Only author can edit and delete own answers
• Only author can delete their own comments
• User cannot vote their own questions or answers
• Only question author can mark answer as correct
• Except for moderators, who can do these for any post/answer/comment

Set up

import { createBackend } from '@backstage/backend-defaults';

const backend = createBackend();
backend.add(import('@backstage/plugin-permission-backend'));
backend.add(import('@drodil/backstage-plugin-qeta-backend'));

backend.start();

In your config you must add both:

permission:
  enabled: true

qeta:
  permissions: true

Now handle the permissions in your own PermissionPolicy. See details from https://backstage.io/docs/permissions/plugin-authors/02-adding-a-basic-permission-check

The Q&A permissions are exported from @drodil/backstage-plugin-qeta-common package and are:

• qetaReadPostPermission - Allows or denies reading of posts
• qetaCreatePostPermission - Allows or denies creating of posts
• qetaEditPostPermission - Allows or denies editing of posts and marking correct answers
• qetaDeletePostPermission - Allows or denies deleting of posts
• qetaReadAnswerPermission - Allows or denies reading of answers
• qetaCreateAnswerPermission - Allows or denies answering questions
• qetaEditAnswerPermission - Allows or denies editing of answers
• qetaDeleteAnswerPermission - Allows or denies deleting of answers
• qetaReadCommentPermission - Allows or denies reading of comments
• qetaCreateCommentPermission - Allows or denies commenting on posts or answers
• qetaEditCommentPermission - Allows or denies editing of comments
• qetaDeleteCommentPermission - Allows or denies deleting of comments

You can find example permission policy in the plugins/qeta-backend/dev/PermissionPolicy.ts file.