Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-5645

Add fine-grained authorization to ltd-keeper users

    XMLWordPrintable

Details

    Description

      The initial MVP of ltd-keeper had all-or-nothing authentication; any user was effectively an admin user. It would be useful have fine grained roles that each API user could have (for example, one API user might be able to add a build, but not create an edition or product or add another user). The phases of this ticket at:

      1. Design a set of roles that cover current functionality
      2. Add these roles to the User DB model and user creation API
      3. Authorize users against these roles in specific API calls

      Attachments

        Issue Links

          Activity

            This PR adds Permissions to individual users so that routes can ensure a user has that permission. Note I haven’t added the /users/ route in this ticket to create new users with specific API permissions.

            jsick Jonathan Sick added a comment - This PR adds Permissions to individual users so that routes can ensure a user has that permission. Note I haven’t added the /users/ route in this ticket to create new users with specific API permissions.

            Looks good. Review comments are on the GitHub PR.

            jmatt J Matt Peterson [X] (Inactive) added a comment - Looks good. Review comments are on the GitHub PR.

            Thanks jmatt. I’ll catch you again when I add the /users/ route.

            jsick Jonathan Sick added a comment - Thanks jmatt . I’ll catch you again when I add the /users/ route.

            People

              jsick Jonathan Sick
              jsick Jonathan Sick
              J Matt Peterson [X] (Inactive)
              J Matt Peterson [X] (Inactive), Jonathan Sick
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Jenkins

                  No builds found.