feat(roles): grant ML Data Manager collection and pipeline config perms

[mihow]

Summary

Follows up on #1212. Adds more permissions to the ML Data Manager role so they can fully manage the resources needed to run batch ML jobs:

• Capture sets (collections): CREATE_COLLECTION, UPDATE_COLLECTION, DELETE_COLLECTION, POPULATE_COLLECTION
• Pipeline configs: UPDATE_PROJECT_PIPELINE_CONFIG, DELETE_PROJECT_PIPELINE_CONFIG (already had CREATE)

These also flow to Project Manager via role inheritance.

Test plan

• TestRolePermissions — all 4 role tests pass (ProjectManager already expected these as True)
• TestMLDataManagerCanRunBatchMLJob — still passes
• ami.users.tests — all 30 role/membership tests pass
• Pre-commit hooks pass

Summary by CodeRabbit

• Chores
  • Expanded MLDataManager role permissions to include collection management (create, update, delete, populate) and additional pipeline configuration operations (update, delete).

[netlify]

✅ Deploy Preview for antenna-preview ready!

Name	Link
🔨 Latest commit	8ddf388
🔍 Latest deploy log	https://app.netlify.com/projects/antenna-preview/deploys/69d5bb96d2465f0008bdc91d
😎 Deploy Preview	https://deploy-preview-1215--antenna-preview.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 75 (🔴 down 5 from production) Accessibility: 97 (no change from production) Best Practices: 92 (no change from production) SEO: 100 (no change from production) PWA: 80 (no change from production) View the detailed breakdown and full score reports

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for antenna-ssec canceled.

Name	Link
🔨 Latest commit	8ddf388
🔍 Latest deploy log	https://app.netlify.com/projects/antenna-ssec/deploys/69d5bb96189d8b0008229574

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 573ff088-f163-436c-a3b4-9b5c9abc70de

📥 Commits

Reviewing files that changed from the base of the PR and between 83a970c and 8ddf388.

📒 Files selected for processing (1)

• ami/users/roles.py

---

📝 Walkthrough

Walkthrough

Updated the MLDataManager role in ami/users/roles.py to extend its permissions set, adding six new permission codenames related to pipeline configuration management and collection operations: UPDATE/DELETE_PROJECT_PIPELINE_CONFIG and CREATE/UPDATE/DELETE/POPULATE_COLLECTION.

Changes

Cohort / File(s)	Summary
MLDataManager Permissions Expansion ami/users/roles.py	Extended MLDataManager.permissions set with six new permission codenames: UPDATE_PROJECT_PIPELINE_CONFIG, DELETE_PROJECT_PIPELINE_CONFIG, CREATE_COLLECTION, UPDATE_COLLECTION, DELETE_COLLECTION, and POPULATE_COLLECTION.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• feat(roles): allow ML Data Manager to run batch ML jobs #1212: Modifies the same MLDataManager.permissions set in ami/users/roles.py, adding different permission codenames to the role's capabilities.

Poem

🐰 Collections bloom and pipelines flow,
New permissions help our managers grow,
Six little powers, a hopping stride,
To update, delete, and populate with pride! 🌱

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely summarizes the main change: granting ML Data Manager role collection and pipeline config permissions.
Description check	✅ Passed	The description covers the summary, list of changes, related issues, testing approach, and follows the template structure with all essential information provided.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/ml-data-manager-collection-perms

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Extends the MLDataManager role’s permission set so ML data managers (and, via inheritance, project managers) can manage capture set collections and project pipeline configs needed for running batch ML jobs, following up on #1212.

Changes:

• Grant MLDataManager update/delete permissions for project pipeline configs.
• Grant MLDataManager create/update/delete/populate permissions for collections.
• Permissions continue to flow to ProjectManager through role inheritance.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.