Meta-Issue: Multi-tenancy in Fedora

[dannylamb]

This is a meta-issue to track the development of multi-tenancy usage of Fedora in Islandora, that is multiple Drupal (multi)sites preserved in a single Fedora.

The general approach is to give each Drupal site its own subtree in the overall Fedora, and use WebAC policies to enforce restrictions limiting activity to each sites' users.

Please reference this issue in each subsequent issues so that they are linked.

[acoburn]

@dannylamb while I recognize that this is definitely a feature that people want, I'd like to push on the underlying assumptions a little.

Once upon a time, people built really large application servers that ran lots of apps for lots of users from different realms, but with the way things are with containerization, that's kinda a thing of the past. These days, rather than running a single server to handle lots of "sites", you more typically have lots of small containerized applications, each of which handles only its own realm. This allows you isolate data, runtime and access control, which is almost always a big win. In a cloud-deployed context, it is an even bigger win, especially for hosting institutions that might want a coherent way to "charge-back" the users of the system.

So, for this issue, the question would really become: in a multi-site context, do you want multiple repository backends or only a single repository backend?