Greptile Summary

This PR fixes a permission error on the /project/requests page for users who have read_requests but not read_channels. The executions sub-query inside GetRequests was unconditionally fetching channel { id name }, which triggered the backend's read_channels permission check and rejected the whole request.

• Renames the existing channelFields variable to requestChannelFields for clarity, since a second guard variable is now needed.
• Adds executionChannelFields using the same permissions.canViewChannels conditional pattern, and splices it into status${executionChannelFields} within the executions.edges.node selection — matching the guard already present on the top-level request.channel.

Confidence Score: 5/5

Safe to merge — the change is a minimal, targeted guard that mirrors an identical pattern already present in the same function.

The fix is a one-line conditional splice inside a single query-builder function. It follows the exact same pattern as the requestChannelFields guard directly above it, and no new logic paths are introduced. Users with canViewChannels = true continue to receive channel data; users without the permission simply omit that field — no data loss or regression risk.

No files require special attention.

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant UI as Frontend
    participant GQL as GraphQL API
    participant Auth as Permission Guard

    Note over UI: User has read_requests only (no read_channels)

    UI->>GQL: GetRequests query
    GQL->>Auth: Check read_requests → ✅ Allowed

    alt BEFORE fix: channel always requested inside executions
        GQL->>Auth: Check read_channels (RequestExecution.channel) → ❌ Denied
        GQL-->>UI: Permission error – page fails entirely
    end

    alt AFTER fix: channel inside executions guarded by canViewChannels
        Note over UI: canViewChannels = false → executionChannelFields = ""
        GQL-->>UI: Returns modelID + status (no channel) → ✅ Page loads
    end

_{Reviews (1): Last reviewed commit: "fix(frontend): guard execution channel q..." | Re-trigger Greptile}