Handle missing tail permissions on down (#945)

* handle missing tail permissions on down

* update buf protoc-gen-go

* detach without tail permissions on down

* remove redundant Delete permission

src/cmd/cli/command/compose.go

@@ -338,8 +338,17 @@ func makeComposeDownCmd() *cobra.Command {
 				Verbose:            verbose,
 				LogType:            logs.LogTypeAll,
 			}
-			err = cli.Tail(cmd.Context(), provider, projectName, tailOptions)
+			tailCtx := cmd.Context()
+			err = cli.Tail(tailCtx, provider, projectName, tailOptions)
 			if err != nil {
+				if connect.CodeOf(err) == connect.CodePermissionDenied {
+					// If tail fails because of missing permission, we show a warning and detach. This is
+					// different than `up`, which will wait for the deployment to finish, but we don't have an
+					// ECS event subscription for `down` so we can't wait for the deployment to finish.
+					// Instead, we'll just show a warning and detach.
+					term.Warn("Unable to tail logs. Detaching.")
+					return nil
+				}
 				return err
 			}
 			term.Info("Done.")

src/pkg/scope/scope.go

@@ -15,5 +15,5 @@ func (s Scope) String() string {
 }
 
 func All() []Scope {
-	return []Scope{Admin, Delete, Read, Tail, Delete}
+	return []Scope{Admin, Delete, Read, Tail}
 }