From ce8f22b92f075c918318a7fcca4b45d84f3633bb Mon Sep 17 00:00:00 2001
From: Diego Imbert <diego@windmill.dev>
Date: Fri, 9 Jan 2026 16:01:01 +0100
Subject: [PATCH] badge indicator

---
 .../workspaceSettings/StorageSettings.svelte         | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
index ef5925153c..7522f4e373 100644
--- a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
+++ b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
@@ -90,6 +90,11 @@
 	function isDirty(name: string | null): boolean {
 		return name === null ? primaryStorageIsDirty : secondaryStorageIsDirty[name]
 	}
+
+	function isPermissionsNonDefault(storage: S3ResourceSettingsItem): boolean {
+		const defaultPerms = defaultS3AdvancedPermissions(!!$enterpriseLicense)
+		return !deepEqual(storage.advancedPermissions, defaultPerms)
+	}
 </script>
 
 <Portal name="workspace-settings">
@@ -179,12 +184,16 @@
 						<div class="flex gap-2">
 							<Button
 								variant="default"
-								btnClasses="px-2.5"
+								btnClasses="px-2.5 relative"
 								size="sm"
 								onClick={() =>
 									(advancedPermissionModalState = { open: true, storage: tableRow[1] })}
 							>
 								<Shield size={16} /> Permissions <ChevronDown size={14} />
+								{#if isPermissionsNonDefault(tableRow[1])}
+									<span class="absolute -top-0.5 -right-0.5 h-1.5 w-1.5 rounded-full bg-accent"
+									></span>
+								{/if}
 							</Button>
 							{#if emptyString(tableRow[1].resourcePath) || isDirty(tableRow[0])}
 								<Popover
@@ -387,7 +396,6 @@
 				<MultiSelect
 					items={[{ value: 'read' }, { value: 'write' }, { value: 'delete' }, { value: 'list' }]}
 					bind:value={item.allow}
-					disablePortal
 					class="w-[20rem]"
 					placeholder="Deny all access"
 					hideMainClearBtn