Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
We have recently added "tenancy" to the project.
With tenancy, every resource have a tenant, where resource can be a delivery-service, a server (future) and even a user.
We are now starting to enforce access-control based on the resource tenancy. A user can manage a resource only if the resource is under the user tenancy.
This JIRA deals with "profiles¶meters as a resource" - adding the tenancy to these objects and enforcing access control for their management. It is required for completeing the DS tenancy phase, as the DS points to a profile that we would not like out of tenant users to modify.
We still need to finalize the specification of this access control, and it would not be included in the first phase of tenancy introduction.