On Thu, Mar 23, 2017 at 10:42:02AM -0000, Aurelien Bompard wrote:
Hey people!
Unless I'm mistaken, there is currently no authorization layer in Hubs. Nothing
checks that only johnsmith can edit the johnsmith hub, or that only members of the design
team can edit the designteam hub.
Is somebody working on that? Since I think we need it before we can consider a public
release, I propose to find a library that would allow us to set and enforce those
authorizations, and implement it in the current codebase. At the moment I think the main
requirement is auth based on group membership. The library should allow us to assign
people to groups based on their FAS groups, but I believe this is more the scope of the
authentication library, so I shouldn't matter here.
What do you think? Is it a good time to start working on that?
Sorry I didn't see this earlier... It would make sense to talk to
puiterwijk about the auth situation here.
--
Paul W. Frields
http://paul.frields.org/
gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717
http://redhat.com/ - - - -
http://pfrields.fedorapeople.org/
The open source story continues to grow:
http://opensource.com