feat(server): FF_USERS_INVITE_SCOPE_IS_PUBLIC flag to make users:invite scope public (#5244)

utils/helm/speckle-server/templates/_helpers.tpl

@@ -1154,6 +1154,10 @@ Generate the environment variables for Speckle server and Speckle objects deploy
   value: {{ .Values.openTelemetry.tracing.value | quote }}
 {{- end }}
 
+{{- if .Values.featureFlags.usersInviteScopeIsPublic }}
+- name: FF_USERS_INVITE_SCOPE_IS_PUBLIC
+  value: {{ .Values.featureFlags.usersInviteScopeIsPublic | quote }}
+{{- end }}
 
 {{- if .Values.featureFlags.workspacesMultiRegionEnabled }}
 # Multi-region

utils/helm/speckle-server/values.schema.json

@@ -144,6 +144,11 @@
           "type": "boolean",
           "description": "Enables the ability to create and manage saved views",
           "default": false
+        },
+        "usersInviteScopeIsPublic": {
+          "type": "boolean",
+          "description": "Enables the ability to create Personal Access Tokens (PAT) with users:invite privileges. WARNING: This can be used by untrusted users to send spam; do not enable on servers which allow public registration or to which untrusted users have been, or will be, invited.",
+          "default": false
         }
       }
     },

utils/helm/speckle-server/values.yaml

@@ -79,6 +79,8 @@ featureFlags:
   rhinoFileImporterEnabled: false
   ## @param featureFlags.savedViewsEnabled Enables the ability to create and manage saved views
   savedViewsEnabled: false
+  ## @param featureFlags.usersInviteScopeIsPublic Enables the ability to create Personal Access Tokens (PAT) with users:invite privileges. WARNING: This can be used by untrusted users to send spam; do not enable on servers which allow public registration or to which untrusted users have been, or will be, invited.
+  usersInviteScopeIsPublic: false
 
 analytics:
   ## @param analytics.enabled Enable or disable analytics