Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RFC: Operator User separation #35

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

YoussB
Copy link
Member

@YoussB YoussB commented Aug 9, 2019

rendered
An idea that arose when working on the super admin story concourse/concourse#4192.

YoussB and others added 5 commits August 9, 2019 11:57
some language fix.

Signed-off-by: Bishoy Youssef <[email protected]>
Signed-off-by: Bishoy Youssef <[email protected]>
Signed-off-by: Bishoy Youssef <[email protected]>
Signed-off-by: Bishoy Youssef <[email protected]>
@YoussB YoussB force-pushed the operator-user-separation branch from 5850465 to d0248a3 Compare August 9, 2019 15:57
@YoussB YoussB changed the title Proposal for Operator User separation RFC: Operator User separation Aug 9, 2019
@jama22
Copy link
Member

jama22 commented Aug 23, 2019

In general, I'm not a fan of associating privileges to specific teams. I know we currently have that today with members of the main team granting app-wide privileges, and I'm also not OK with that either!

Specifically, I think it creates a lot of surprise and confusion to attach special actions to not just the role that you possess, but also your membership into specific teams.

Now, the limitation today is that roles are constrained to membership into a team:
User -> Team -> Role

Maybe its more interesting to introduce new roles that do not need to be attached to the team:
User -> Role -> Team -> Role

We'd have to design the Roles & Permissions so that the permissions themselves do not overlap and intersect in surprising ways

@vito vito self-assigned this Apr 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants