Ticket #1596 (new enhancement)

Opened 2 years ago

Last modified 2 years ago

Refactor authz roles

Reported by: dread Owned by:
Priority: awaiting triage Milestone: ckan-future
Component: ckan Keywords:
Cc: rgrp Repository: ckan
Theme: none

Description

Suggestions from rgrp:

  • Get rid of Roles, and replace them with direct assignment of actions, even though there are many actions, and extensions can add arbitrary ones.
  • Debatable whether we should cut the number of actions to correspond to the three roles defined by the base system.
  • Have a method of finding roles (or, in future, actions) relevant to a given protection object (e.g. FILE-UPLOAD(ER) not relevant to Packages)

(This ticket is split off from #1065)

Change History

comment:1 Changed 2 years ago by dread

  • Cc rgrp added

comment:2 Changed 2 years ago by ross

  • Milestone changed from ckan-v1.7 to ckan-future
Note: See TracTickets for help on using tickets.