[katello-devel] Permissions for domains and subnets

Bryan Kearney bkearney at redhat.com
Wed Nov 21 13:53:49 UTC 2012


On 11/21/2012 08:51 AM, Justin Sherrill wrote:
> On 11/21/2012 08:04 AM, Lukas Zapletal wrote:
>> Hey,
>>
>> starting working on this task, I think I can inspire from Providers:
>>
>> https://fedorahosted.org/katello/wiki/PermissionMatrix#Providers
>>
>> I am going to implement the very same permission set. Opinions?
>>
>> (Are we keeping the page up to date?)
>>
>> LZ
>>
> So I think it makes sense except for one point.  Provider permissions
> are generally tagged verbs.  So all verbs except for create/administer
> are only for a specific Provider (that is unless you tick the all
> box).   So an example would be  "Read Provider X", which not allow the
> user to read provider Y.
>
> I'm  not sure this makes sense for subnets and domains?   I guess it
> depends on what you do with a subnet or domain.   Thoughts?
>
> Other resources like Activationkeys do not use tags for any of their
> verbs.  So giving the ability to read is giving the ability to read
> all.  (Same with update & delete).
>

So, this is a better match then.

- bk





More information about the katello-devel mailing list