Add comprehensive permissions API #1

Open
opened 2020-12-28 18:00:54 +00:00 by garrettmills · 1 comment
Owner

Add a comprehensive permissions API.

  • Create a permissions listing that allows the user to create nested permissions
  • Allow managing permissions via IAM policy
  • Integrate the permissions into the various auth APIs
    • OAuth2 - as scopes
    • OpenID Connect - as scopes (will need some work)
    • LDAP - as a custom overlay/property - maybe queryable?
    • SAML - custom properties? Not great support here.
    • REST API endpoint for checking permission for current user
Add a comprehensive permissions API. * Create a permissions listing that allows the user to create nested permissions * Allow managing permissions via IAM policy * Integrate the permissions into the various auth APIs * OAuth2 - as scopes * OpenID Connect - as scopes (will need some work) * LDAP - as a custom overlay/property - maybe queryable? * SAML - custom properties? Not great support here. * REST API endpoint for checking permission for current user
Author
Owner

Rest API is serviceable using the new IAM permissions interface.

Rest API is serviceable using the new IAM permissions interface.
Sign in to join this conversation.
No Label
No Milestone
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Starship/CoreID#1
No description provided.