-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Labels
area/rbacscope/backendscope/frontendstatus/acceptedAn issue which has passed triage and has been acceptedAn issue which has passed triage and has been acceptedtype/featureA new featureA new feature
Milestone
Description
Implemented. Documentation is here / @Haarolean
The main idea of this feature is to provide access control for authenticated users based on roles.
Backend should support reading role bindings from git, s3, http, local yaml config
like
roleBindings:
roleName:
users:
- userName
and role access control file, like
roles:
roleName:
permissions:
- resource: consumerGroups
includes: ["/.*/"]
excludes: []
allowedActions: ["listTopics"]
List of resources and actions should be defined and described in separate document.
Using this bindings and ACL lists, backend should check all actions from authenticated users and provide this list to frontend.
Frontend should use this data to show/hide certain action buttons, menus
simonasr, lisl2862, sergejusk-simplex, jpuskar, hhromic and 40 morepodon, northboys, sherifkayad, janhoon, robinovitch61 and 4 more
Metadata
Metadata
Labels
area/rbacscope/backendscope/frontendstatus/acceptedAn issue which has passed triage and has been acceptedAn issue which has passed triage and has been acceptedtype/featureA new featureA new feature