[katello-devel] Permissions for domains and subnets
Bryan Kearney
bkearney at redhat.com
Wed Nov 21 13:53:49 UTC 2012
On 11/21/2012 08:51 AM, Justin Sherrill wrote:
> On 11/21/2012 08:04 AM, Lukas Zapletal wrote:
>> Hey,
>>
>> starting working on this task, I think I can inspire from Providers:
>>
>> https://fedorahosted.org/katello/wiki/PermissionMatrix#Providers
>>
>> I am going to implement the very same permission set. Opinions?
>>
>> (Are we keeping the page up to date?)
>>
>> LZ
>>
> So I think it makes sense except for one point. Provider permissions
> are generally tagged verbs. So all verbs except for create/administer
> are only for a specific Provider (that is unless you tick the all
> box). So an example would be "Read Provider X", which not allow the
> user to read provider Y.
>
> I'm not sure this makes sense for subnets and domains? I guess it
> depends on what you do with a subnet or domain. Thoughts?
>
> Other resources like Activationkeys do not use tags for any of their
> verbs. So giving the ability to read is giving the ability to read
> all. (Same with update & delete).
>
So, this is a better match then.
- bk
More information about the katello-devel
mailing list