access.yml

# <service-name-1>
#   // tables that this service has access to
#   tables:
#     <tableName>: [read|write]
#     <tableName>: [read|write]
#     - ...
auth:
  tables:
    clients: write
    roles: write
github:
  tables:
    github_builds: write
    github_integrations: write
    github_checks: write
hooks:
  tables:
    hooks: write
    hooks_queues: write
    hooks_last_fires: write
    tasks: read
index:
  tables:
    indexed_tasks: write
    index_namespaces: write
notify:
  tables:
    denylisted_notifications: write
object:
  tables:
    objects: write
    object_hashes: write
purge_cache:
  tables:
    cache_purges: write
queue:
  tables:
    queue_artifacts: write
    task_groups: write
    task_dependencies: write
    task_queues: write
    queue_workers: write
    azure_queue_messages: write
    tasks: write
secrets:
  tables:
    secrets: write
web_server:
  tables:
    authorization_codes: write
    access_tokens: write
    sessions: write
    github_access_tokens: write
worker_manager:
  tables:
    workers: write
    worker_pools: write
    worker_pool_errors: write
    queue_workers: read
    task_queues: read