Ticket #1011 (closed enhancement: fixed)
Make pluggable AuthzGroups implementation
| Reported by: | sebbacon | Owned by: | sebbacon |
|---|---|---|---|
| Priority: | awaiting triage | Milestone: | ckan-v1.4-sprint-3 |
| Component: | ckan | Keywords: | |
| Cc: | Repository: | ||
| Theme: |
Description
I have a requirement to allow an external source to define the groups of which a user is a member.
I propose to create an IAuthzUserGroups plugin interface that allows an extension to arbitrarily extend the list of AuthzGroups? that a user is in.
Change History
comment:1 Changed 3 years ago by sebbacon
- Summary changed from Make groups implementation pluggable to Make pluggable AuthzGroups implementation
comment:2 Changed 3 years ago by sebbacon
On reflection, may as well make a Plugin interface called IAuthorizer, which allows customisation of get_authorization_groups, get_roles, and is_authorized....
comment:3 Changed 3 years ago by rgrp
I agree that IAuthorizer is useful but not sure how it addresses the requirement of the ticket. AuthorizationGroups? are already editable via the web interface at /authorizationgroup
comment:4 Changed 3 years ago by sebbacon
The "external source" is an Oauth service. We need to lookup user groups from that service.
comment:5 Changed 3 years ago by sebbacon
Proposed implementation at https://bitbucket.org/okfn/ckan/changeset/187e65afb35f
comment:6 Changed 3 years ago by sebbacon
- Milestone changed from ckan-v1.4-sprint-2 to ckan-v1.4-sprint-3
comment:7 Changed 3 years ago by sebbacon
- Status changed from new to closed
- Resolution set to fixed
Merged to default https://bitbucket.org/okfn/ckan/changeset/e8217c317a8e
