feat(backend): update MCP installation logs permissions and descriptions

Author: Lasim

services/backend/api-spec.json

@@ -13300,7 +13300,7 @@
         "tags": [
           "MCP Installations"
         ],
-        "description": "Retrieves logs for a specific MCP installation with pagination and optional level filtering. Requires mcp.installations.view permission. Logs are returned newest first.",
+        "description": "Retrieves logs for a specific MCP installation with pagination and optional level filtering. Requires mcp.installations.logs.view permission. Logs are returned newest first.",
         "parameters": [
           {
             "schema": {

services/backend/api-spec.yaml

@@ -9293,8 +9293,8 @@ paths:
       tags:
         - MCP Installations
       description: Retrieves logs for a specific MCP installation with pagination and
-        optional level filtering. Requires mcp.installations.view permission.
-        Logs are returned newest first.
+        optional level filtering. Requires mcp.installations.logs.view
+        permission. Logs are returned newest first.
       parameters:
         - schema:
             type: integer

services/backend/src/permissions/index.ts

@@ -35,6 +35,7 @@ export const ROLE_DEFINITIONS = {
     'mcp.versions.manage',
     'mcp.installations.view_all',
     'mcp.installations.view',
+    'mcp.installations.logs.view',
     'mcp.installations.create',
     'mcp.installations.edit',
     'mcp.installations.delete',
@@ -83,6 +84,7 @@ export const ROLE_DEFINITIONS = {
     'cloud_credentials.delete',
     'mcp.servers.read',
     'mcp.installations.view',
+    'mcp.installations.logs.view',
     'mcp.installations.create',
     'mcp.installations.edit',
     'mcp.installations.delete',

services/backend/src/routes/teams/mcp-installations/logs-stream.ts

@@ -76,7 +76,7 @@ export default async function getInstallationLogsStreamRoute(server: FastifyInst
 		Querystring: LogsQueryParams;
 	}>('/teams/:teamId/mcp/installations/:installationId/logs/stream', {
 		sse: true,
-		preValidation: requireTeamPermission('mcp.installations.view'),
+		preValidation: requireTeamPermission('mcp.installations.logs.view'),
 		schema: {
 			tags: ['MCP Installations'],
 			summary: 'Stream installation server logs (SSE)',

services/backend/src/routes/teams/mcp-installations/logs.ts

@@ -159,12 +159,12 @@ export default async function getInstallationLogsRoute(server: FastifyInstance)
 		Params: TeamAndInstallationParams;
 		Querystring: LogsQueryParams;
 	}>('/teams/:teamId/mcp/installations/:installationId/logs', {
-		preValidation: requireTeamPermission('mcp.installations.view'),
+		preValidation: requireTeamPermission('mcp.installations.logs.view'),
 		schema: {
 			tags: ['MCP Installations'],
 			summary: 'Get installation logs',
 			description:
-				'Retrieves logs for a specific MCP installation with pagination and optional level filtering. Requires mcp.installations.view permission. Logs are returned newest first.',
+				'Retrieves logs for a specific MCP installation with pagination and optional level filtering. Requires mcp.installations.logs.view permission. Logs are returned newest first.',
 			security: [{ cookieAuth: [] }, { bearerAuth: [] }],
 
 			// Fastify validation schemas