Ticket #1011 (closed enhancement: fixed)

Opened 3 years ago

Last modified 3 years ago

Make pluggable AuthzGroups implementation

Reported by: sebbacon Owned by: sebbacon
Priority: awaiting triage Milestone: ckan-v1.4-sprint-3
Component: ckan Keywords:
Cc: Repository:


I have a requirement to allow an external source to define the groups of which a user is a member.

I propose to create an IAuthzUserGroups plugin interface that allows an extension to arbitrarily extend the list of AuthzGroups? that a user is in.

Change History

comment:1 Changed 3 years ago by sebbacon

  • Summary changed from Make groups implementation pluggable to Make pluggable AuthzGroups implementation

comment:2 Changed 3 years ago by sebbacon

On reflection, may as well make a Plugin interface called IAuthorizer, which allows customisation of get_authorization_groups, get_roles, and is_authorized....

comment:3 Changed 3 years ago by rgrp

I agree that IAuthorizer is useful but not sure how it addresses the requirement of the ticket. AuthorizationGroups? are already editable via the web interface at /authorizationgroup

comment:4 Changed 3 years ago by sebbacon

The "external source" is an Oauth service. We need to lookup user groups from that service.

comment:5 Changed 3 years ago by sebbacon

comment:6 Changed 3 years ago by sebbacon

  • Milestone changed from ckan-v1.4-sprint-2 to ckan-v1.4-sprint-3

comment:7 Changed 3 years ago by sebbacon

  • Status changed from new to closed
  • Resolution set to fixed
Note: See TracTickets for help on using tickets.