Share Database with User

Description

Prerequisite: Adjust UI based on Database capabilities

For the problem description see Database Permissions.

Overview

This is the first customer-facing Feature in the scope of Database access. These are the key goals at this point:

Specify who can create Entities in a Database (Submitter) to unlock creating without seeing everything use case.
Manage automatic access via User relations from Database sharing popup in addition to Field edit/creation controls for a better discoverability.
Grant User some basic access at the Space level (e.g. Viewer) and upgrade it for a certain DB to something more powerful (e.g. Editor).

Solution

Figma

Add an option to share a DB via the context menu:
Borrow the popup from Space sharing with a few tweaks:
1. Manage access for Created By, Assignees and other to-User relations
2. Share Entities of a DB with a specific User

Permissions

Till Add Creator access template in Database sharing, only a Creator in the DB's Space can share a DB, change or revoke access.

Addtionally, to share a Database with someone using an access template, the sharer has to have all the capabilities of the template. For example to grant Commenter access, someone has to have entity.read, entity.readHistory and entity.comment capabilities for this DB. Now these is always true for a Space Creator.

🦄 After Add Creator access template in Database sharing, there will be dedicated DB-level capabilities for managing access.

Permissions on who can configure automatic access via user relations are different from DB permissions: Allow non-Admins to configure automatic access. Here we don't change anything in the scope of this Feature.

Notes

No notifications necessary for the person receiving DB access
Delete → restore DB => access is restored (apart from relations: Creator can edit a custom access template if it's used in automatic access in some case)
User DB is not supported until Configure access to Users

🦄 Next

Allow not to extend access from Space to its Entities
Share Database with Group
Configure Database access in advanced mode
:zauri: Icons for actions in Database context menu
[Import data] Disable New Database→ Existing Database switcher for DB-level creators

Default DB access templates

	`create`	`read readHistory`	`comment`	`update` `clickButton`	`delete`	`shareToPublic`	`unapplyAccessTemplate`	`update(Type) delete(Type) unapplyAccessTemplate(Type)`
Creator	➕	👁️	💬	✏️	🗑️	🌐	👤	⚙️
Editor	➕	👁️	💬	✏️	🗑️	🌐	👤
Commenter		👁️	💬
Viewer		👁️
Submitter	➕

We have to rename the default Entity access templates: Owner → Editor, Editor → ??? for consistency between Entity, DB, and Space access templates.

We might rename Submitter to Contributor once we deprecate the Space-level one.

Implementation notes

What access templates are available for guest? Is it ok to revoke access from guest?

~~Implemented → no way to setup _any_ type access template or revoke it for guest user.~~

Type capability source Dmitry Kabak

{type: "source/type",
 capabilities: ["entity.read", ..] ,
 template-name: "access/editor"}