@backstage-community/plugin-rbac-backend
Version:
1,096 lines (618 loc) • 62 kB
Markdown
# @backstage-community/plugin-rbac-backend
## 7.16.1
### Patch Changes
- 9733799: Updated dependency `qs` to `6.15.3`.
- 72557ed: Updated dependency `@types/node` to `22.20.1`.
## 7.16.0
### Minor Changes
- 895009c: add support for Azure PostgreSQL passwordless authentication with managed identity
### Patch Changes
- 058e6a2: Conditional policy reconciliation preserves stored conditions when staging or persistence fails, and correctly merges sibling conditions for the same role and resource without conflict errors during reload.
## 7.15.0
### Minor Changes
- 845383a: Backstage version bump to v1.52.0
### Patch Changes
- Updated dependencies [845383a]
- @backstage-community/plugin-rbac-common@1.29.0
- @backstage-community/plugin-rbac-node@1.23.0
## 7.14.0
### Minor Changes
- 091ec86: Backstage version bump to v1.51.0.
The RBAC backend plugin now resolves user identity through Backstage's `UserInfoService` when evaluating conditional permissions, as part of aligning with the Backstage 1.51 permission framework. **No action is required** if you install RBAC with `backend.add(import('@backstage-community/plugin-rbac-backend'))` and manage access through app-config as documented.
If you extend RBAC at a lower level (for example by constructing `PolicyBuilder` directly), ensure `UserInfoService` is wired through your backend integration.
### Patch Changes
- c9d4e50: Updated dependency `qs` to `6.15.2`.
- 387d2e9: Updated dependency `@types/node` to `22.19.19`.
- 6d964f2: Migrated MUI-v4 references to MUI-v5
Adds New Frontend System dev entrypoints and removes workspace example apps in favor of the plugin `dev/` pattern. Dev backend wiring lives in `plugins/rbac-backend/dev/` (same approach as linguist, feedback, and other FE+BE plugins).
- Updated dependencies [091ec86]
- @backstage-community/plugin-rbac-common@1.28.0
- @backstage-community/plugin-rbac-node@1.22.0
## 7.13.0
### Minor Changes
- 6a916a1: Backstage version bump to v1.50.4
### Patch Changes
- Updated dependencies [6a916a1]
- @backstage-community/plugin-rbac-common@1.27.0
- @backstage-community/plugin-rbac-node@1.21.0
## 7.12.5
### Patch Changes
- 39a3942: Hardens RBAC policy handling to prevent Casbin CSV poisoning and improve error visibility.
Key fixes:
- Rejects permission policy `permission` values containing `"` before persistence (prevents known CSV parse failures).
- Rethrows `loadPolicy` failures after audit logging so mutation/read paths surface the root cause instead of secondary errors.
- Improves policy API request validation and missing-role handling (`400`/`404` where appropriate).
- Validates default configured permissions/admin refs with the same stricter checks used by runtime write paths.
- Strengthens conditional and plugin-id payload validation and aligns owner filtering behavior for default roles.
Compatibility notes:
- Requests/config entries using `permission` values with embedded `"` are now rejected.
- Conditional policy payloads and conditional YAML ingestion now enforce limits.
- Conditional `permissionMapping` must list distinct Backstage permission actions (no duplicates); at most one entry per supported action (`create`, `read`, `update`, `delete`, `use`).
- Plugin ID registration payloads now enforce count/length/duplicate checks.
- For larger existing payloads, limits are configurable via:
- `permission.rbac.validation.conditionalPolicies.maxConditionDepth`
- `permission.rbac.validation.conditionalPolicies.maxConditionNodeCount`
- `permission.rbac.validation.conditionalPolicies.maxCriteriaItems`
- `permission.rbac.validation.conditionalPoliciesFile.maxBytes`
- `permission.rbac.validation.conditionalPoliciesFile.maxDocuments`
Operational note:
- CSV policy files are parsed line-by-line; malformed lines are skipped with warnings instead of aborting the entire file load.
## 7.12.4
### Patch Changes
- 170f85d: Migrate to Jest 30 and fix backend test assertion compatibility
- Updated dependencies [170f85d]
- @backstage-community/plugin-rbac-common@1.26.1
- @backstage-community/plugin-rbac-node@1.20.1
## 7.12.3
### Patch Changes
- fb2a770: Made postgres username and password optional in casbin adapter factory to support passwordless authentication
## 7.12.2
### Patch Changes
- 39272f8: Updated dependency `csv-parse` to `^6.0.0`.
- 70e6333: Updated dependency `@dagrejs/graphlib` to `^4.0.0`.
- a559dfb: Updated dependency `@types/node` to `22.19.17`.
- 8846adf: Updated dependency `qs` to `6.15.1`.
## 7.12.1
### Patch Changes
- 40e44bb: Updated dependency `qs` to `6.14.2`.
## 7.12.0
### Minor Changes
- 8993474: Backstage version bump to v1.49.2
### Patch Changes
- Updated dependencies [8993474]
- @backstage-community/plugin-rbac-common@1.26.0
- @backstage-community/plugin-rbac-node@1.20.0
## 7.11.0
### Minor Changes
- 50e194d: Add support for a default role and permissions for authenticated users in RBAC backend
- Introduced a new `defaultRole` and `basicPermissions` configuration options to assign a default role to all authenticated users.
```diff
permission:
rbac:
+ defaultPermissions:
+ defaultRole: role:default/my-default-role
+ basicPermissions:
+ - permission: catalog.entity.read
+ action: read
```
- Updated the RBAC permission policy to include the default role in user roles if not already present.
### Patch Changes
- Updated dependencies [50e194d]
- @backstage-community/plugin-rbac-common@1.25.0
- @backstage-community/plugin-rbac-node@1.19.1
## 7.10.0
### Minor Changes
- 133eae6: Add support for loading conditional permissions from a remote provider (fix #6412)
### Patch Changes
- Updated dependencies [133eae6]
- @backstage-community/plugin-rbac-node@1.19.0
## 7.9.1
### Patch Changes
- d737494: Backstage version bump to v1.48.5
- Updated dependencies [d737494]
- @backstage-community/plugin-rbac-common@1.24.1
- @backstage-community/plugin-rbac-node@1.18.1
## 7.9.0
### Minor Changes
- da170a1: Add support for group reference in superUsers list, using direct membership only
### Patch Changes
- 8a6b81c: Updated dependency `@types/supertest` to `^7.0.0`.
## 7.8.0
### Minor Changes
- 843bbe2: Backstage version bump to v1.48.4
### Patch Changes
- Updated dependencies [843bbe2]
- @backstage-community/plugin-rbac-common@1.24.0
- @backstage-community/plugin-rbac-node@1.18.0
## 7.7.2
### Patch Changes
- 8c7bddb: Added NFS support
- af998b7: Updated dependency `supertest` to `7.2.2`.
## 7.7.1
### Patch Changes
- b133c9d: Updated dependency `@types/supertest` to `^6.0.0`.
- 497d5c6: Updated dependency `@types/node` to `22.19.11`.
- 9c7ae87: Fix - stop error on upgrade v1.47.x - allow all plugins in the arry to show
## 7.7.0
### Minor Changes
- e6dbf70: Backstage version bump to v1.47.2
### Patch Changes
- e6dbf70: updated the permissionFactory to use the `FetchUrlReader.fromConfig`
- a184943: Updated dependency `@types/node` to `22.19.7`.
- Updated dependencies [e6dbf70]
- @backstage-community/plugin-rbac-common@1.23.0
- @backstage-community/plugin-rbac-node@1.17.0
## 7.6.2
### Patch Changes
- 9a07184: Backport: Remove usage of breaking imports from @backstage/backend-defaults
This backports the fix from commit 9c7ae87 to avoid compatibility issue when @backstage/backend-defaults resolves to 0.13.2, which introduced breaking changes to address a CVE. By removing the problematic import, this plugin remains compatible with both 0.13.1 and 0.13.2 and does not use the code containing the CVE.
## 7.6.1
### Patch Changes
- 6d3ed24: Updated dependency `supertest` to `^7.0.0`.
- 9714391: Updated dependency `qs` to `6.14.1`.
- efdad9e: Updated dependency `@types/node` to `22.19.3`.
## 7.6.0
### Minor Changes
- e2d17e1: Backstage version bump to v1.45.1
### Patch Changes
- 636525d: Updated dependency `@types/express` to `4.17.25`.
- Updated dependencies [e2d17e1]
- @backstage-community/plugin-rbac-common@1.22.0
- @backstage-community/plugin-rbac-node@1.16.0
## 7.5.1
### Patch Changes
- 0743ffa: Backport: Remove usage of breaking imports from @backstage/backend-defaults
This backports the fix from commit 9c7ae87 to avoid compatibility issues when @backstage backend-defaults resolves to 0.13.2, which introduced breaking changes to address a CVE. By removing the problematic import, this plugin remains compatible with both 0.13.1 and 0.13.2 and does not use the code containing the CVE.
## 7.5.0
### Minor Changes
- 2d1f63f: Backstage version bump to v1.44.2
### Patch Changes
- Updated dependencies [2d1f63f]
- @backstage-community/plugin-rbac-common@1.21.0
- @backstage-community/plugin-rbac-node@1.15.0
## 7.4.3
### Patch Changes
- 05801c1: Backport: Remove usage of breaking imports from @backstage/backend-defaults
This backports the fix from commit 9c7ae87 to avoid compatibility issues when @backstage backend-defaults resolves to 0.13.2, which introduced breaking changes to address a CVE. By removing the problematic import, this plugin remains compatible with both 0.13.1 and 0.13.2 and does not use the code containing the CVE.
## 7.4.2
### Patch Changes
- de412d4: Fix issue with extra delimiter in conditional yaml.
- 93ce408: Compare parent reference in sqlite memo using entity ref
## 7.4.1
### Patch Changes
- db1ab9d: Updated dependency `knex-mock-client` to `3.0.2`.
## 7.4.0
### Minor Changes
- 232a84d: Backstage version bump to v1.42.5
### Patch Changes
- Updated dependencies [232a84d]
- @backstage-community/plugin-rbac-common@1.20.0
- @backstage-community/plugin-rbac-node@1.14.0
## 7.3.0
### Minor Changes
- 5260b5c: support config to set permission vs conditional policy evaluation order
## 7.2.0
### Minor Changes
- 2f4d9ff: Backstage version bump to v1.41.1
### Patch Changes
- e843699: Added missing configSchema into package.json
- Updated dependencies [2f4d9ff]
- @backstage-community/plugin-rbac-common@1.19.0
- @backstage-community/plugin-rbac-node@1.13.0
## 7.1.0
### Minor Changes
- 8db28a0: Updated readme example on conditional policy yaml to be well formed (removed quotes)
### Patch Changes
- 4c49556: Updated dependency `@types/express` to `4.17.23`.
## 7.0.0
### Major Changes
- 2e732e8: **BREAKING**: Removal of the deprecated createRouter from @backstage/plugin-permission-backend. This results in a new requirement of having the permission plugin installed alongside the RBAC backend plugin.
Recent changes to the @backstage/plugin-permission-backend resulted in the deprecating and removal of `createRouter` which was primarily used as a way to start both the permission backend plugin and the RBAC backend plugin at the same time. This removal now results in the requirement of having the permission backend plugin installed separately to ensure that the RBAC backend plugin works accordingly.
Changes required to `packages/backend/src/index.ts`
```diff
// permission plugin
+ backend.add(import('@backstage/plugin-permission-backend'));
backend.add(import('@backstage-community/plugin-rbac-backend'));
```
### Minor Changes
- 4b58a1d: Backstage version bump to v1.39.0
### Patch Changes
- 6a59fcf: remove support and lifecycle keywords in package.json
- Updated dependencies [6a59fcf]
- Updated dependencies [4b58a1d]
- @backstage-community/plugin-rbac-common@1.18.0
- @backstage-community/plugin-rbac-node@1.12.0
## 6.3.0
### Minor Changes
- a42945e: Introduce API to store additional plugin ID list
- 3e3f346: Migrate rbac-backend to use permission registry service.
### Patch Changes
- 098b200: Updated dependency `@types/express` to `4.17.22`.
- e958f2f: Updated dependency `@types/node` to `22.15.29`.
- Updated dependencies [a42945e]
- @backstage-community/plugin-rbac-common@1.17.0
## 6.2.6
### Patch Changes
- fcc57ec: Updated dependency `@types/node` to `22.14.1`.
## 6.2.5
### Patch Changes
- 658c51c: chore: Remove usage of @spotify/prettier-config
- Updated dependencies [658c51c]
- @backstage-community/plugin-rbac-common@1.16.1
- @backstage-community/plugin-rbac-node@1.11.1
## 6.2.4
### Patch Changes
- 298b1d4: Avoid unnecessary query to check 'relations' table in the role manager
## 6.2.3
### Patch Changes
- 9436665: Reduce rbac-backend requests to credentials API.
## 6.2.2
### Patch Changes
- c92a50c: Fixed a bug where updating a role name via the `PUT </api/permission/roles/:kind/:namespace/:name>` endpoint did not propagate changes to metadata, permissions and conditions, leaving them mapped to the old role name.
## 6.2.1
### Patch Changes
- 10b9919: Avoid filter's args duplication.
## 6.2.0
### Minor Changes
- e8755f6: Backstage version bump to v1.38.1
### Patch Changes
- Updated dependencies [e8755f6]
- @backstage-community/plugin-rbac-common@1.16.0
- @backstage-community/plugin-rbac-node@1.11.0
## 6.1.1
### Patch Changes
- 10a0d31: Fixes an issue where the correct permission name was not selected while processing new conditional policies to be added. This scenario happens whenever a plugin exports multiple permissions that have different resource types but similar actions. What would end up happening is the first matched action would be the one selected during processing even though it was not the correct permission and used for the conditional policy. This problem has been fixed and now the correct permission name and action are selected.
## 6.1.0
### Minor Changes
- d278b4c: Adds the ability to assign ownership to roles that can then be used to conditionally filter roles, permission policies, and conditional policies. The conditional filter can now be accomplished through the use of the new RBAC conditional rule `IS_OWNER`.
`IS_OWNER` can be used to grant limited access to the RBAC plugins where in admins might want leads to control their own team's access.
Removed the resource type from the `policy.entity.create` permission to prevent conditional rules being applied to the permission. At the moment, the plugins will still continue to work as expected. However, it is strongly recommended updating all permission policies that utilize the resource type `policy-entity` with the action `create` (ex. `role:default/some_role, policy-entity, create, allow` to `role:default/some_role, policy.entity.create, create, allow`) to prevent any future degradation in service. A migration has been supplied to automatically update all permission policies that have not originated from the CSV file. The CSV file was skipped as a duplication event could happen during reloads / restarts. This means that the CSV file will need to be updated manually to ensure that all references to the old permission policy, resource type `policy-entity` with an action of `create`, have been updated to the named permission `policy.entity.create` with an action of `create`.
### Patch Changes
- Updated dependencies [d278b4c]
- @backstage-community/plugin-rbac-common@1.15.0
## 6.0.1
### Patch Changes
- f84ad73: chore: remove homepage field from package.json
- Updated dependencies [f84ad73]
- @backstage-community/plugin-rbac-common@1.14.1
- @backstage-community/plugin-rbac-node@1.10.1
## 6.0.0
### Major Changes
- 9cccb0d: **BREAKING**: Migration to the core Auditor service. The Auditor format has been updated. Audit fields and event names (ids) have been updated to conform with the new Auditor service conventions. Filtering queries based on the old format may no longer work.
## 5.6.1
### Patch Changes
- b2a5daa: Updated dependency `qs` to `6.14.0`.
## 5.6.0
### Minor Changes
- 0253db6: Backstage version bump to v1.36.1
### Patch Changes
- Updated dependencies [0253db6]
- @backstage-community/plugin-rbac-common@1.14.0
- @backstage-community/plugin-rbac-node@1.10.0
## 5.5.3
### Patch Changes
- 973a5ef: remove prettier from devDevpendencies
- Updated dependencies [973a5ef]
- @backstage-community/plugin-rbac-node@1.9.1
## 5.5.2
### Patch Changes
- 9aa839a: Fixes two issues that were impact the performance, the first was that we were individually adding and removing roles and the second was we were removing all policies and roles regardless of whether they should actually be removed.
## 5.5.1
### Patch Changes
- fcfaf89: Fixed an issue where aliases would not be applied across all conditional policy rules.
## 5.5.0
### Minor Changes
- 36e2c6c: Reduces the number of times that we build the group hierarchy graphs during evaluation. Originally, during time of evaluation, we would build a graph to of all of the groups that a user was directly or indirectly a member of. Now, we only build the graph once and pass along all of the roles that the user is directly or indirectly attached to.
## 5.4.0
### Minor Changes
- 5d5c02a: Backstage version bump to v1.35.0
### Patch Changes
- Updated dependencies [5d5c02a]
- @backstage-community/plugin-rbac-common@1.13.0
- @backstage-community/plugin-rbac-node@1.9.0
## 5.3.1
### Patch Changes
- 1d5dd17: Evaluate the permissions for a superuser earlier in the process to avoid the unintended consequence of having conditional permissions policies applied to a superuser.
## 5.3.0
### Minor Changes
- 53daff0: Roles and permissions were not correctly applied for users and groups with names containing uppercase letters. To address this issue, we now convert user and group references in all user inputs to lowercase. This change migrates `v0` column in `casbin_rule` table in `backstage_plugin_permission` database. Conditions containing claims with uppercase letters are not resolved yet.
## 5.2.10
### Patch Changes
- ba4b3e9: Use loadPolicy to keep the enforcer in sync for edit operations. It should keep the RBAC plugin in sync when the Backstage instance is scaled to multiple deployment replicas. Reuse the maximum database pool size value from the application configuration in the RBAC Casbin adapter.
## 5.2.9
### Patch Changes
- 5b19b0d: Update documentation information about `pluginsWithPermission` setting. In order for the RBAC UI to display available permissions provided by installed plugins, this setting needs to be configured.
## 5.2.8
### Patch Changes
- 0f5c451: Updated dependency `prettier` to `3.4.2`.
- 18f9d9d: Updated dependency `@types/node` to `18.19.68`.
- Updated dependencies [0f5c451]
- @backstage-community/plugin-rbac-node@1.8.4
## 5.2.7
### Patch Changes
- 7843798: Updated dependency `qs` to `6.13.1`.
- 4b3653a: Clean up api report warnings and remove unnecessary files
- Updated dependencies [4b3653a]
- @backstage-community/plugin-rbac-common@1.12.3
- @backstage-community/plugin-rbac-node@1.8.3
## 5.2.6
### Patch Changes
- 4084738: Ensures that the permissions and roles are properly synced during request handling. This is important in high availability scenarios as we need to ensure data is up to date during scaling.
## 5.2.5
### Patch Changes
- a6e850f: Updated dependency `msw` to `1.3.5`.
## 5.2.4
### Patch Changes
- dd0e2b4: chore: use workspace dependencies
- b7c2fa1: Updated supported-versions to ^1.28.4.
- Updated dependencies [b7c2fa1]
- @backstage-community/plugin-rbac-common@1.12.2
- @backstage-community/plugin-rbac-node@1.8.2
## 5.2.3
### Patch Changes
- 2249d08: bump rbac plugins to include latest changes in janus
## 5.2.2
### Patch Changes
- 019f010: Migrated from [janus-idp/backstage-plugins](https://github.com/janus-idp/backstage-plugins).
- Updated dependencies [019f010]
- @backstage-community/plugin-rbac-common@1.12.1
- @backstage-community/plugin-rbac-node@1.8.1
## 5.2.1
### Patch Changes
- 0646434: Fix broken plugin startup: don't attempt to store permission policies that are already stored.
## 5.2.0
### Minor Changes
- 8244f28: chore(deps): update to backstage 1.32
### Patch Changes
- Updated dependencies [8244f28]
- @janus-idp/backstage-plugin-audit-log-node@1.7.0
- @backstage-community/plugin-rbac-common@1.12.0
- @backstage-community/plugin-rbac-node@1.8.0
## 5.1.2
### Patch Changes
- 7342e9b: chore: remove @janus-idp/cli dep and relink local packages
This update removes `@janus-idp/cli` from all plugins, as it’s no longer necessary. Additionally, packages are now correctly linked with a specified version.
## 5.1.1
### Patch Changes
- e6ef910: Refactors the rbac backend plugin to prevent the creation of permission policies and roles whenever the plugin and permission framework is disabled
## 5.1.0
### Minor Changes
- d9551ae: feat(deps): update to backstage 1.31
### Patch Changes
- d9551ae: Refactors the rbac backend plugin to move the admin role and admin permission creation to a separate file
- d9551ae: Change local package references to a `*`
- d9551ae: upgrade to yarn v3
- Updated dependencies [d9551ae]
- Updated dependencies [d9551ae]
- Updated dependencies [d9551ae]
- @backstage-community/plugin-rbac-common@1.11.0
- @janus-idp/backstage-plugin-audit-log-node@1.6.0
- @backstage-community/plugin-rbac-node@1.7.0
* **@janus-idp/backstage-plugin-audit-log-node:** upgraded to 1.5.1
### Dependencies
- **@janus-idp/backstage-plugin-audit-log-node:** upgraded to 1.5.0
- **@backstage-community/plugin-rbac-common:** upgraded to 1.10.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.6.0
### Dependencies
- **@janus-idp/backstage-plugin-audit-log-node:** upgraded to 1.4.1
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.9.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.5.0
## @backstage-community/plugin-rbac-backend [4.7.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.7.2...@backstage-community/plugin-rbac-backend@4.7.3) (2024-08-06)
### Bug Fixes
- **rbac:** implement conditional aliases ([#1847](https://github.com/janus-idp/backstage-plugins/issues/1847)) ([dbc9a0b](https://github.com/janus-idp/backstage-plugins/commit/dbc9a0bc92f19a4382e406f83b4889905dc6e33d))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.8.2
## @backstage-community/plugin-rbac-backend [4.7.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.7.1...@backstage-community/plugin-rbac-backend@4.7.2) (2024-08-05)
### Bug Fixes
- **rbac:** add additional validation for permission policies ([#1908](https://github.com/janus-idp/backstage-plugins/issues/1908)) ([592498f](https://github.com/janus-idp/backstage-plugins/commit/592498f34a3b605162d3c242184aa6877b0360e8)), closes [#1939](https://github.com/janus-idp/backstage-plugins/issues/1939)
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.8.1
## @backstage-community/plugin-rbac-backend [4.7.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.7.0...@backstage-community/plugin-rbac-backend@4.7.1) (2024-08-02)
### Bug Fixes
- **rbac:** log when plugin has no permissions ([#1917](https://github.com/janus-idp/backstage-plugins/issues/1917)) ([cc8752b](https://github.com/janus-idp/backstage-plugins/commit/cc8752b159364fdab62e7bbdaa51ca811288197b))
## @backstage-community/plugin-rbac-backend [4.7.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.6.1...@backstage-community/plugin-rbac-backend@4.7.0) (2024-07-30)
### Features
- **argocd:** add permission support for argocd ([#1855](https://github.com/janus-idp/backstage-plugins/issues/1855)) ([3b78237](https://github.com/janus-idp/backstage-plugins/commit/3b782377683605ea4d584c43bea14be2f435003d))
## @backstage-community/plugin-rbac-backend [4.6.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.6.0...@backstage-community/plugin-rbac-backend@4.6.1) (2024-07-29)
### Bug Fixes
- **rbac:** fix uncommited knex transaction in the addGroupingPolicies ([#1968](https://github.com/janus-idp/backstage-plugins/issues/1968)) ([24d5eef](https://github.com/janus-idp/backstage-plugins/commit/24d5eeffbce685bbe05f8895fe3a69ee26a4eb8a))
## @backstage-community/plugin-rbac-backend [4.6.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.5.0...@backstage-community/plugin-rbac-backend@4.6.0) (2024-07-26)
### Features
- **tekton:** add permissions support for tekton plugin ([#1854](https://github.com/janus-idp/backstage-plugins/issues/1854)) ([f744896](https://github.com/janus-idp/backstage-plugins/commit/f7448963c252574e0309a091563c19e1ed9a58fd))
## @backstage-community/plugin-rbac-backend [4.5.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.4.3...@backstage-community/plugin-rbac-backend@4.5.0) (2024-07-26)
### Features
- **deps:** update to backstage 1.29 ([#1900](https://github.com/janus-idp/backstage-plugins/issues/1900)) ([f53677f](https://github.com/janus-idp/backstage-plugins/commit/f53677fb02d6df43a9de98c43a9f101a6db76802))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.8.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.4.0
## @backstage-community/plugin-rbac-backend [4.4.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.4.2...@backstage-community/plugin-rbac-backend@4.4.3) (2024-07-25)
### Documentation
- **rbac:** add curl request examples ([#1913](https://github.com/janus-idp/backstage-plugins/issues/1913)) ([e496eb7](https://github.com/janus-idp/backstage-plugins/commit/e496eb73349987d43caba86a29e4c98c86179250))
## @backstage-community/plugin-rbac-backend [4.4.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.4.1...@backstage-community/plugin-rbac-backend@4.4.2) (2024-07-24)
### Bug Fixes
- **deps:** rollback unreleased plugins ([#1951](https://github.com/janus-idp/backstage-plugins/issues/1951)) ([8b77969](https://github.com/janus-idp/backstage-plugins/commit/8b779694f02f8125587296305276b84cdfeeaebe))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.7.2
- **@backstage-community/plugin-rbac-node:** upgraded to 1.3.1
## @backstage-community/plugin-rbac-backend [4.4.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.4.0...@backstage-community/plugin-rbac-backend@4.4.1) (2024-07-24)
### Bug Fixes
- **rbac:** don't start transaction if there no group policies ([#1923](https://github.com/janus-idp/backstage-plugins/issues/1923)) ([dffa964](https://github.com/janus-idp/backstage-plugins/commit/dffa9643b500a19dc70c66cedf9016508cdb5947))
## @backstage-community/plugin-rbac-backend [4.4.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.3.4...@backstage-community/plugin-rbac-backend@4.4.0) (2024-07-24)
### Features
- **deps:** update to backstage 1.28 ([#1891](https://github.com/janus-idp/backstage-plugins/issues/1891)) ([1ba1108](https://github.com/janus-idp/backstage-plugins/commit/1ba11088e0de60e90d138944267b83600dc446e5))
### Bug Fixes
- **deps:** fix rbac dependencies ([#1918](https://github.com/janus-idp/backstage-plugins/issues/1918)) ([fcc4e1d](https://github.com/janus-idp/backstage-plugins/commit/fcc4e1dde55bc0fb2dd284d256330c7f9f928036))
- **deps:** move backend-test-utils to devDependencies ([#1944](https://github.com/janus-idp/backstage-plugins/issues/1944)) ([9052a3f](https://github.com/janus-idp/backstage-plugins/commit/9052a3f41cae1cd57fb8f52033ea2c6f752f64fe))
### Documentation
- added OpenAPI spec for rbac-backend ([#1830](https://github.com/janus-idp/backstage-plugins/issues/1830)) ([4eb2035](https://github.com/janus-idp/backstage-plugins/commit/4eb20351bf9713355cb79905a2e49aeec9ad6ec9))
- **rbac:** fix condition rules api url ([#1914](https://github.com/janus-idp/backstage-plugins/issues/1914)) ([e6fa0ae](https://github.com/janus-idp/backstage-plugins/commit/e6fa0ae7265ea56b50fffbf1466540a61d714ed8))
## @backstage-community/plugin-rbac-backend [4.3.4](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.3.3...@backstage-community/plugin-rbac-backend@4.3.4) (2024-07-17)
### Bug Fixes
- **rbac:** simplify db logic ([#1842](https://github.com/janus-idp/backstage-plugins/issues/1842)) ([cbe263b](https://github.com/janus-idp/backstage-plugins/commit/cbe263b2901c0d57105667caf2d3ab7c0583468a))
## @backstage-community/plugin-rbac-backend [4.3.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.3.2...@backstage-community/plugin-rbac-backend@4.3.3) (2024-07-16)
### Bug Fixes
- **rbac:** catch errors whenever a plugin token is not generated ([#1866](https://github.com/janus-idp/backstage-plugins/issues/1866)) ([c9abf44](https://github.com/janus-idp/backstage-plugins/commit/c9abf441591347753fe94fe2590b8059804baeb7))
## @backstage-community/plugin-rbac-backend [4.3.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.3.1...@backstage-community/plugin-rbac-backend@4.3.2) (2024-07-05)
### Bug Fixes
- **rbac:** casbinDBAdapterFactory supporting postgres schema configuration ([#1841](https://github.com/janus-idp/backstage-plugins/issues/1841)) ([c0e63f9](https://github.com/janus-idp/backstage-plugins/commit/c0e63f9541edc121c77d6569d6fe6958ce937c0b))
- **rbac:** correct plugin ID matching to permission policy ([#1795](https://github.com/janus-idp/backstage-plugins/issues/1795)) ([6dc4b1c](https://github.com/janus-idp/backstage-plugins/commit/6dc4b1c23d22252f394eecd8b795ac15507ecc50))
- **rbac:** update rbac common to fix compilation ([#1858](https://github.com/janus-idp/backstage-plugins/issues/1858)) ([48f142b](https://github.com/janus-idp/backstage-plugins/commit/48f142b447f0d1677ba3f16b2a3c8972b22d0588))
## @backstage-community/plugin-rbac-backend [4.3.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.3.0...@backstage-community/plugin-rbac-backend@4.3.1) (2024-06-19)
## @backstage-community/plugin-rbac-backend [4.3.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.2.0...@backstage-community/plugin-rbac-backend@4.3.0) (2024-06-13)
### Features
- **deps:** update to backstage 1.27 ([#1683](https://github.com/janus-idp/backstage-plugins/issues/1683)) ([a14869c](https://github.com/janus-idp/backstage-plugins/commit/a14869c3f4177049cb8d6552b36c3ffd17e7997d))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.6.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.2.0
- **@janus-idp/backstage-plugin-audit-log-node:** upgraded to 1.2.0
## @backstage-community/plugin-rbac-backend [4.2.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.1.0...@backstage-community/plugin-rbac-backend@4.2.0) (2024-06-05)
### Features
- **rbac:** add type checks with generics for audit log ([#1789](https://github.com/janus-idp/backstage-plugins/issues/1789)) ([ac69838](https://github.com/janus-idp/backstage-plugins/commit/ac698382f64fe91e0f9f9232dd3eecd9cc9247be))
### Dependencies
- **@janus-idp/backstage-plugin-audit-log-node:** upgraded to 1.1.0
## @backstage-community/plugin-rbac-backend [4.1.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.0.2...@backstage-community/plugin-rbac-backend@4.1.0) (2024-06-04)
### Features
- **rbac:** add audit log for RBAC backend ([#1726](https://github.com/janus-idp/backstage-plugins/issues/1726)) ([e50464b](https://github.com/janus-idp/backstage-plugins/commit/e50464bcb38e9897ddfe208fdeef699e4bfeda3a))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.5.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.1.2
- **@janus-idp/backstage-plugin-audit-log-node:** upgraded to 1.0.3
## @backstage-community/plugin-rbac-backend [4.0.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.0.1...@backstage-community/plugin-rbac-backend@4.0.2) (2024-06-04)
### Bug Fixes
- **rbac:** fix handling condition action conflicts ([#1781](https://github.com/janus-idp/backstage-plugins/issues/1781)) ([966b2b2](https://github.com/janus-idp/backstage-plugins/commit/966b2b200e0ade0ce600901a7853a4a94751df22))
## @backstage-community/plugin-rbac-backend [4.0.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@4.0.0...@backstage-community/plugin-rbac-backend@4.0.1) (2024-06-03)
### Bug Fixes
- **rbac:** add support for scaling ([#1757](https://github.com/janus-idp/backstage-plugins/issues/1757)) ([caddc83](https://github.com/janus-idp/backstage-plugins/commit/caddc832e0df5199a455539d3538635448691c2d))
## @backstage-community/plugin-rbac-backend [4.0.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@3.3.0...@backstage-community/plugin-rbac-backend@4.0.0) (2024-05-31)
### ⚠ BREAKING CHANGES
- **rbac:** This will lead to more strict validation on the source of permission policies and roles based on the where the first role is defined.
Improves the validation of the different sources of permission policies and roles. Aims to make policy definition more consistent.
Now checks if a permission policy or role with new member matches the originating role's source and prevents any action if the sources do not match. Exception includes the event of adding
new permission policies to the RBAC Admin role defined by the configuration file. Sources include 'REST, 'CSV', 'Configuration', and 'legacy'.
Before updating, ensure that you have attempted to migrate all permission policies and roles to a single source. This can be done by checking source information through the REST API and
by querying the database. Make updates through one of the available avenues: REST API, CSV file, and the database.
To view the originating source for a particular role, query the role-metadata table or use the GET roles endpoint.
- feat(rbac): remove the ability to add permission policies to configuration role
- feat(rbac): remove no longer needed check for source in EnforcerDelegate
- feat(rbac): update yarn lock
- feat(rbac): address review comments
### Features
- **rbac:** improve validation from source ([#1643](https://github.com/janus-idp/backstage-plugins/issues/1643)) ([5f983cb](https://github.com/janus-idp/backstage-plugins/commit/5f983cbc0184e0a8e74f7e89cdff71d5ed5cd2fa))
## @backstage-community/plugin-rbac-backend [3.3.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@3.2.0...@backstage-community/plugin-rbac-backend@3.3.0) (2024-05-29)
### Features
- **rbac:** improve conditional policy validation ([#1673](https://github.com/janus-idp/backstage-plugins/issues/1673)) ([15dac91](https://github.com/janus-idp/backstage-plugins/commit/15dac91b673c63a4e7ac41f95296651df2ef8053))
## @backstage-community/plugin-rbac-backend [3.2.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@3.1.1...@backstage-community/plugin-rbac-backend@3.2.0) (2024-05-21)
### Features
- **topology:** add permissions to topology plugin ([#1665](https://github.com/janus-idp/backstage-plugins/issues/1665)) ([9d8f244](https://github.com/janus-idp/backstage-plugins/commit/9d8f244ae136cdf1980a5abf416180bce3f235ea))
## @backstage-community/plugin-rbac-backend [3.1.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@3.1.0...@backstage-community/plugin-rbac-backend@3.1.1) (2024-05-16)
## @backstage-community/plugin-rbac-backend [3.1.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@3.0.0...@backstage-community/plugin-rbac-backend@3.1.0) (2024-05-14)
### Features
- **rbac:** implement a file watcher for csv reloads ([#1587](https://github.com/janus-idp/backstage-plugins/issues/1587)) ([62fcafc](https://github.com/janus-idp/backstage-plugins/commit/62fcafcdb3ab3cb308b16b8fab0a14916b921b82))
### Bug Fixes
- **rbac:** fix sonar cloud issues for rbac-backend plugin ([#1619](https://github.com/janus-idp/backstage-plugins/issues/1619)) ([bf93354](https://github.com/janus-idp/backstage-plugins/commit/bf9335404232f8ec66253f56387d3432d8839406))
## @backstage-community/plugin-rbac-backend [3.0.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.8.2...@backstage-community/plugin-rbac-backend@3.0.0) (2024-05-10)
### ⚠ BREAKING CHANGES
- **rbac:** remove token manager for auth service (#1632)
### Bug Fixes
- **rbac:** remove token manager for auth service ([#1632](https://github.com/janus-idp/backstage-plugins/issues/1632)) ([2f19655](https://github.com/janus-idp/backstage-plugins/commit/2f196556cffc61c83239721b1cd51d6a2c64eee7))
## @backstage-community/plugin-rbac-backend [2.8.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.8.1...@backstage-community/plugin-rbac-backend@2.8.2) (2024-05-09)
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.4.2
- **@backstage-community/plugin-rbac-node:** upgraded to 1.1.1
## @backstage-community/plugin-rbac-backend [2.8.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.8.0...@backstage-community/plugin-rbac-backend@2.8.1) (2024-05-07)
### Bug Fixes
- **rbac:** implement ability to disable rbac-backend plugin ([#1501](https://github.com/janus-idp/backstage-plugins/issues/1501)) ([6367965](https://github.com/janus-idp/backstage-plugins/commit/6367965c550286dc8423b0942341ecee178dc6c1))
## @backstage-community/plugin-rbac-backend [2.8.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.7.1...@backstage-community/plugin-rbac-backend@2.8.0) (2024-05-07)
### Features
- **rbac:** add support for the new backend services ([#1607](https://github.com/janus-idp/backstage-plugins/issues/1607)) ([2892709](https://github.com/janus-idp/backstage-plugins/commit/2892709860987c6f4b36d821afa2e612b220d030))
## @backstage-community/plugin-rbac-backend [2.7.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.7.0...@backstage-community/plugin-rbac-backend@2.7.1) (2024-05-06)
### Bug Fixes
- **ocm:** update ocm frontend plugin readme ([#1611](https://github.com/janus-idp/backstage-plugins/issues/1611)) ([9960cc0](https://github.com/janus-idp/backstage-plugins/commit/9960cc0c2d611cdd1ee10a82ed02b7be9becefcf))
## @backstage-community/plugin-rbac-backend [2.7.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.6.4...@backstage-community/plugin-rbac-backend@2.7.0) (2024-04-25)
### Features
- **rbac:** add the optional maxDepth feature ([#1486](https://github.com/janus-idp/backstage-plugins/issues/1486)) ([ea87f34](https://github.com/janus-idp/backstage-plugins/commit/ea87f3412eb374123ea623332de0648d4c7bda5c))
- **rbac:** lazy load temporary enforcer ([#1513](https://github.com/janus-idp/backstage-plugins/issues/1513)) ([b5f1552](https://github.com/janus-idp/backstage-plugins/commit/b5f1552f069068af43a4ca2756a5a38187f6d453))
## @backstage-community/plugin-rbac-backend [2.6.4](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.6.3...@backstage-community/plugin-rbac-backend@2.6.4) (2024-04-17)
### Bug Fixes
- **rbac:** reduce the number of permissions returned, add isResourced flag ([#1474](https://github.com/janus-idp/backstage-plugins/issues/1474)) ([e5dda95](https://github.com/janus-idp/backstage-plugins/commit/e5dda95bfc87d1d5d404726cbbe05c8bfdb73845))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.4.1
## @backstage-community/plugin-rbac-backend [2.6.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.6.2...@backstage-community/plugin-rbac-backend@2.6.3) (2024-04-15)
### Dependencies
- **@backstage-community/plugin-rbac-node:** upgraded to 1.1.0
## @backstage-community/plugin-rbac-backend [2.6.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.6.1...@backstage-community/plugin-rbac-backend@2.6.2) (2024-04-09)
### Dependencies
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.6
## @backstage-community/plugin-rbac-backend [2.6.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.6.0...@backstage-community/plugin-rbac-backend@2.6.1) (2024-04-08)
### Dependencies
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.5
## @backstage-community/plugin-rbac-backend [2.6.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.5.1...@backstage-community/plugin-rbac-backend@2.6.0) (2024-04-05)
### Features
- **rbac:** save role modification information to the metadata ([#1280](https://github.com/janus-idp/backstage-plugins/issues/1280)) ([0454509](https://github.com/janus-idp/backstage-plugins/commit/0454509e41db2ae332d1b2bf8f72d34241483efd))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.4.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.5
## @backstage-community/plugin-rbac-backend [2.5.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.5.0...@backstage-community/plugin-rbac-backend@2.5.1) (2024-04-04)
### Bug Fixes
- **rbac:** rework condition policies to bound them to RBAC roles ([#1330](https://github.com/janus-idp/backstage-plugins/issues/1330)) ([55c00b2](https://github.com/janus-idp/backstage-plugins/commit/55c00b21b27b449cb0e5100c7b64a6ae742536ac))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.3.2
## @backstage-community/plugin-rbac-backend [2.5.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.4.1...@backstage-community/plugin-rbac-backend@2.5.0) (2024-03-29)
### Features
- **rbac:** load filtered policies before enforcing ([#1387](https://github.com/janus-idp/backstage-plugins/issues/1387)) ([66980ba](https://github.com/janus-idp/backstage-plugins/commit/66980baebd4d8b5b398646bcab1750c0edec715e))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.3.1
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.4
## @backstage-community/plugin-rbac-backend [2.4.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.4.0...@backstage-community/plugin-rbac-backend@2.4.1) (2024-03-19)
### Bug Fixes
- **rbac:** pass token to readUrl for well-known permission endpoint ([#1342](https://github.com/janus-idp/backstage-plugins/issues/1342)) ([36b7c77](https://github.com/janus-idp/backstage-plugins/commit/36b7c7739753bd1cc55d10aa68d41ed7e15162e6))
## @backstage-community/plugin-rbac-backend [2.4.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.3.5...@backstage-community/plugin-rbac-backend@2.4.0) (2024-03-14)
### Features
- **rbac:** query the catalog database when building graph ([#1298](https://github.com/janus-idp/backstage-plugins/issues/1298)) ([c2c9e22](https://github.com/janus-idp/backstage-plugins/commit/c2c9e22e90a594e2a44d1683a05d3111c4baa97b))
### Bug Fixes
- **rbac:** remove admin metadata, when all admins removed from config ([#1314](https://github.com/janus-idp/backstage-plugins/issues/1314)) ([cc6555e](https://github.com/janus-idp/backstage-plugins/commit/cc6555ea22a191c9f9f554b1909b67e517deee71))
## @backstage-community/plugin-rbac-backend [2.3.5](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.3.4...@backstage-community/plugin-rbac-backend@2.3.5) (2024-03-07)
### Bug Fixes
- **rbac:** check source before throwing duplicate warning ([#1278](https://github.com/janus-idp/backstage-plugins/issues/1278)) ([a100eef](https://github.com/janus-idp/backstage-plugins/commit/a100eef67983ba73d929864f0b64991de69718d0))
## @backstage-community/plugin-rbac-backend [2.3.4](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.3.3...@backstage-community/plugin-rbac-backend@2.3.4) (2024-03-04)
### Dependencies
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.3
## @backstage-community/plugin-rbac-backend [2.3.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.3.2...@backstage-community/plugin-rbac-backend@2.3.3) (2024-02-29)
### Documentation
- **rbac:** update to the rbac documentation ([#1268](https://github.com/janus-idp/backstage-plugins/issues/1268)) ([5c7253b](https://github.com/janus-idp/backstage-plugins/commit/5c7253b7d0646433c55f185092648f0816aee88e))
## @backstage-community/plugin-rbac-backend [2.3.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.3.1...@backstage-community/plugin-rbac-backend@2.3.2) (2024-02-28)
### Bug Fixes
- **rbac:** improve error handling in retrieving permission metadata. ([#1285](https://github.com/janus-idp/backstage-plugins/issues/1285)) ([77f5f0e](https://github.com/janus-idp/backstage-plugins/commit/77f5f0efaadf1873b68876f11ca633646ce882b9))
## @backstage-community/plugin-rbac-backend [2.3.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.3.0...@backstage-community/plugin-rbac-backend@2.3.1) (2024-02-27)
### Dependencies
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.2
## @backstage-community/plugin-rbac-backend [2.3.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.2.4...@backstage-community/plugin-rbac-backend@2.3.0) (2024-02-21)
### Features
- **rbac:** backend part - store role description to the database ([#1178](https://github.com/janus-idp/backstage-plugins/issues/1178)) ([ec8b1c2](https://github.com/janus-idp/backstage-plugins/commit/ec8b1c27cce5c36997f84a068dc4cc5cc542f428))
### Bug Fixes
- **rbac:** reduce the catalog calls when build graph ([#1203](https://github.com/janus-idp/backstage-plugins/issues/1203)) ([e63aac2](https://github.com/janus-idp/backstage-plugins/commit/e63aac2a8e7513974a5aabb3ce25c838d6b34dde))
### Dependencies
- **@backstage-community/plugin-rbac-common:** upgraded to 1.3.0
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.1
## @backstage-community/plugin-rbac-backend [2.2.4](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.2.3...@backstage-community/plugin-rbac-backend@2.2.4) (2024-02-20)
### Bug Fixes
- **rbac:** drop database disabled mode ([#1214](https://github.com/janus-idp/backstage-plugins/issues/1214)) ([b18d80d](https://github.com/janus-idp/backstage-plugins/commit/b18d80dd14e6b7f4f9c90d72ec418609ff1f6a67))
## @backstage-community/plugin-rbac-backend [2.2.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.2.2...@backstage-community/plugin-rbac-backend@2.2.3) (2024-02-14)
### Bug Fixes
- **rbac:** allow for super users to have allow all access ([#1208](https://github.com/janus-idp/backstage-plugins/issues/1208)) ([c02a4b0](https://github.com/janus-idp/backstage-plugins/commit/c02a4b029a800b1bcf1f2e2722185faae1e5837e))
## @backstage-community/plugin-rbac-backend [2.2.2](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.2.1...@backstage-community/plugin-rbac-backend@2.2.2) (2024-02-13)
### Bug Fixes
- **rbac:** display resource typed permissions by name too ([#1197](https://github.com/janus-idp/backstage-plugins/issues/1197)) ([bc4e8e7](https://github.com/janus-idp/backstage-plugins/commit/bc4e8e783b1acd8088a45ffed4d902fd9515c2e8))
## @backstage-community/plugin-rbac-backend [2.2.1](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.2.0...@backstage-community/plugin-rbac-backend@2.2.1) (2024-02-12)
### Bug Fixes
- **rbac:** csv updates no longer require server restarts ([#1171](https://github.com/janus-idp/backstage-plugins/issues/1171)) ([ed6fe65](https://github.com/janus-idp/backstage-plugins/commit/ed6fe65d99a2c2facf832a84d29dabc8d339e328))
## @backstage-community/plugin-rbac-backend [2.2.0](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.1.3...@backstage-community/plugin-rbac-backend@2.2.0) (2024-02-08)
### Features
- add support for the new backend system to the `rbac-backend` plugin ([#1179](https://github.com/janus-idp/backstage-plugins/issues/1179)) ([d625cb2](https://github.com/janus-idp/backstage-plugins/commit/d625cb2470513862027e048c70944275043ce70a))
### Dependencies
- **@backstage-community/plugin-rbac-node:** upgraded to 1.0.0
## @backstage-community/plugin-rbac-backend [2.1.3](https://github.com/janus-idp/backstage-plugins/compare/@backstage-community/plugin-rbac-backend@2.1.2...@backstage-community/plugin-rbac-backend@2.1.3) (2024-02-02)
### Bug Fixes
- **rbac:** set up higher jest timeout for rbac db tests ([#1163](https://github.com/janus-idp/backstage-plugins/issues/1163)) ([b8541f3](https://github.com/janus-idp/backstage-plugins/commit/b8541f3ac149446238dc07432116fafc23a48a82))
- **rbac:** split policies and roles by source ([#1042](https://github.com/janus-idp/backstage-plugins/issues/1042)) ([03a678