From issues-return-13948-archive-asf-public=cust-asf.ponee.io@airavata.apache.org Thu May 17 17:42:06 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 742CE180634 for ; Thu, 17 May 2018 17:42:05 +0200 (CEST) Received: (qmail 45393 invoked by uid 500); 17 May 2018 15:42:04 -0000 Mailing-List: contact issues-help@airavata.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@airavata.apache.org Received: (qmail 45384 invoked by uid 99); 17 May 2018 15:42:04 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 May 2018 15:42:04 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 0E702CC4D8 for ; Thu, 17 May 2018 15:42:04 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -109.501 X-Spam-Level: X-Spam-Status: No, score=-109.501 tagged_above=-999 required=6.31 tests=[ENV_AND_HDR_SPF_MATCH=-0.5, KAM_ASCII_DIVIDERS=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, USER_IN_DEF_SPF_WL=-7.5, USER_IN_WHITELIST=-100] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id DJMm4fqOu2IZ for ; Thu, 17 May 2018 15:42:03 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTP id F19405FBC5 for ; Thu, 17 May 2018 15:42:02 +0000 (UTC) Received: from jira-lw-us.apache.org (unknown [207.244.88.139]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id DAA92E0A4B for ; Thu, 17 May 2018 15:42:01 +0000 (UTC) Received: from jira-lw-us.apache.org (localhost [127.0.0.1]) by jira-lw-us.apache.org (ASF Mail Server at jira-lw-us.apache.org) with ESMTP id 1A86E217C9 for ; Thu, 17 May 2018 15:42:01 +0000 (UTC) Date: Thu, 17 May 2018 15:42:01 +0000 (UTC) From: "ASF subversion and git services (JIRA)" To: issues@airavata.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (AIRAVATA-2787) GatewayGroups model for storing adminsGroupId, readOnlyAdminsGroupId and defaultGatewayUsersGroupId MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/AIRAVATA-2787?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16479239#comment-16479239 ] ASF subversion and git services commented on AIRAVATA-2787: ----------------------------------------------------------- Commit d7d77112d89dfac2ece64ec1f999f300228fe21f in airavata's branch refs/heads/group-based-auth from [~marcuschristie] [ https://gitbox.apache.org/repos/asf?p=airavata.git;h=d7d7711 ] AIRAVATA-2787 Create GatewayGroups in migration script > GatewayGroups model for storing adminsGroupId, readOnlyAdminsGroupId and defaultGatewayUsersGroupId > --------------------------------------------------------------------------------------------------- > > Key: AIRAVATA-2787 > URL: https://issues.apache.org/jira/browse/AIRAVATA-2787 > Project: Airavata > Issue Type: New Feature > Reporter: Marcus Christie > Assignee: Marcus Christie > Priority: Major > > Create a GatewayGroups thrift model and backend to store the ids of the "Admins", "Read Only Admins" and the default "Gateway Users" group. The "Admins" and "Read Only Admins" group will be used in the API server to automatically grant access to WRITE and READ to those groups, respectively, for newly created entities. The default "Gateway Users" group will be used by migrations (to keep track of previously migrated "Gateway Users" group and to share resources that are being migrated to group-based auth) and also to pre-populate the list of groups to share a new Group Resource Profile or Application Deployment with in UIs (but can be changed by the user). > The AiravataDataMigrator should use the presence of this model to determine if the gateway groups should be created or not. > TODO > * [x] add GatewayGroups model and entity to Registry > * [ ] add create/read methods for the GatewayGroups to the Registry and API services > * [ ] Create the GatewayGroups in the migration script by calling the Registry > * [ ] add an API service DB event handler to create the GatewayGroups when a new gateway is created > Deferred > * add feature to sharing registry to mark certain groups as being undelete-able > * add feature to sharing registry to specify a certain group as one that should be added as admin of all groups created (so gateway admins can edit all groups created in a gateway) -- This message was sent by Atlassian JIRA (v7.6.3#76005)