Skip to content

Role based access control #753

@germanosin

Description

@germanosin

Implemented. Documentation is here / @Haarolean

The main idea of this feature is to provide access control for authenticated users based on roles.
Backend should support reading role bindings from git, s3, http, local yaml config
like

roleBindings:
   roleName:
     users: 
       - userName

and role access control file, like

roles:
    roleName:
    permissions:
          - resource: consumerGroups
            includes: ["/.*/"]
            excludes: []
            allowedActions: ["listTopics"]

List of resources and actions should be defined and described in separate document.
Using this bindings and ACL lists, backend should check all actions from authenticated users and provide this list to frontend.
Frontend should use this data to show/hide certain action buttons, menus

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions