Mailing-List: contact dev-help@syncope.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@syncope.apache.org
Date: Tue, 4 Jul 2017 11:06:00 +0000 (UTC)
From: =?utf-8?Q?Francesco_Chicchiricc=C3=B2_=28JIRA=29?= <jira@apache.org>
To: dev@syncope.apache.org
Message-ID: <JIRA.13084508.1499166077000.165750.1499166360162@Atlassian.JIRA>
In-Reply-To: <JIRA.13084508.1499166077000@Atlassian.JIRA>
References: <JIRA.13084508.1499166077000@Atlassian.JIRA> <JIRA.13084508.1499166077390@jira-lw-us.apache.org>
Subject: [jira] [Updated] (SYNCOPE-1143) Fine-grained administration rights
 for Connector and Resources
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Tue, 04 Jul 2017 11:06:06 -0000


     [ https://issues.apache.org/jira/browse/SYNCOPE-1143?page=3Dcom.atlass=
ian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Francesco Chicchiricc=C3=B2 updated SYNCOPE-1143:
--------------------------------------------
    Description:=20
The current delegated administration model defines coarse-grained entitleme=
nts when it comes to Connectors and Resources: either an administrator can =
manage all connectors and / or all resources, or cannot.

By associating Connectors (and Resources, by consequence) to Realms, it is =
possible to grant entitlements (via Roles) to a given subset of all availab=
le Connector and Resources, e.g. the ones associated to specific Realm(s).

Samples:
 * if a Connector has the Realm {{/a/b/c}} assigned, then it would be manag=
eable by users owning the {{CONNECTOR_UPDATE}} on Realm {{/a/b/c}} (or one =
of its parents)
 * if a Resource is related to a Connector with the Realm {{/a/b/c}} assign=
ed, then it would be manageable by users owning the {{RESOURCE_UPDATE}} on =
Realm {{/a/b/c}} (or one of its parents)

  was:
The current delegated administration model defines coarse-grained entitleme=
nts when it comes to Connectors and Resources: either an administrator can =
manage all connectors and / or all resources, or cannot.

By associating Connectors (and Resources, by consequence) to Realms, it is =
possible to grant entitlements (via Roles) to a given subset of all availab=
le Connector and Resources, e.g. the ones associated to specific Realm(s).


> Fine-grained administration rights for Connector and Resources
> --------------------------------------------------------------
>
>                 Key: SYNCOPE-1143
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1143
>             Project: Syncope
>          Issue Type: Improvement
>          Components: common, console, core
>            Reporter: Francesco Chicchiricc=C3=B2
>             Fix For: 2.0.5, 2.1.0
>
>
> The current delegated administration model defines coarse-grained entitle=
ments when it comes to Connectors and Resources: either an administrator ca=
n manage all connectors and / or all resources, or cannot.
> By associating Connectors (and Resources, by consequence) to Realms, it i=
s possible to grant entitlements (via Roles) to a given subset of all avail=
able Connector and Resources, e.g. the ones associated to specific Realm(s)=
.
> Samples:
>  * if a Connector has the Realm {{/a/b/c}} assigned, then it would be man=
ageable by users owning the {{CONNECTOR_UPDATE}} on Realm {{/a/b/c}} (or on=
e of its parents)
>  * if a Resource is related to a Connector with the Realm {{/a/b/c}} assi=
gned, then it would be manageable by users owning the {{RESOURCE_UPDATE}} o=
n Realm {{/a/b/c}} (or one of its parents)


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)