-
Notifications
You must be signed in to change notification settings - Fork 557
Description
Problem
Currently, auth policies are fixed for all roles and cannot be changed according to user. Let us say, if user wants to have access to a component of devtron from a role which is not supported in the fixed policy, then he/she must be able to do it.
Goal
To create an api that takes new policy for any role from user and updates it for new users as well as existing users with that role.
Implementation
In this api, firstly update the default policy to the policy provided by user. Then, get diff between old and new policy (add, modify & delete operations) and update existing policies in casbin.
Current dev scope
To create an api for allowing users to provide terminal access for trigger roles. This api will contain the method for general use-case, which can be extended to UI in the future.