From 23b352ff277412b37f265dee9ab624f50b7dd6ca Mon Sep 17 00:00:00 2001 From: Anton Afanasyeu Date: Sat, 11 Jul 2026 15:27:00 +0200 Subject: [PATCH] Add media_pipelines RBAC privilege sets for experimental restream UI. Grants media_pipelines_view and media_pipelines_operate for lab developer access alongside global admin gating. Co-authored-by: Cursor --- src/Rbac.php | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/Rbac.php b/src/Rbac.php index 95e67b1..00a33a3 100644 --- a/src/Rbac.php +++ b/src/Rbac.php @@ -30,6 +30,8 @@ final class Rbac { public const PRIVILEGE_SET_REMOTE_ACCESS_ADMIN = 'remote_access_admin'; public const PRIVILEGE_SET_SHORT_LINKS_VIEWER = 'short_links_viewer'; public const PRIVILEGE_SET_SHORT_LINKS_USER = 'short_links_user'; + public const PRIVILEGE_SET_MEDIA_PIPELINES_VIEWER = 'media_pipelines_viewer'; + public const PRIVILEGE_SET_MEDIA_PIPELINES_USER = 'media_pipelines_user'; /** @var array> */ public const PRIVILEGE_SETS = [ @@ -49,6 +51,13 @@ final class Rbac { 'short_links_view', 'short_links_operate', ], + self::PRIVILEGE_SET_MEDIA_PIPELINES_VIEWER => [ + 'media_pipelines_view', + ], + self::PRIVILEGE_SET_MEDIA_PIPELINES_USER => [ + 'media_pipelines_view', + 'media_pipelines_operate', + ], ]; private const COMPANY_ROLE_ACTIONS = [