Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Authorization #379

Open
hennevogel opened this issue Aug 30, 2024 · 6 comments
Open

Authorization #379

hennevogel opened this issue Aug 30, 2024 · 6 comments
Labels
content What we build and deliver feature Things that are not possible but should be possible user-guide

Comments

@hennevogel
Copy link
Member

Who can do what on OBS. This includes

  • Global Roles (Admin)
  • Project/Package Roles (maintainer etc.)
  • Permission inheritance (sub-projects)
  • Permissions in specific workflows (sources, triggers, requests etc.)
@hennevogel hennevogel converted this from a draft issue Aug 30, 2024
@hennevogel hennevogel added feature Things that are not possible but should be possible content What we build and deliver user-guide labels Aug 30, 2024
@smithfarm
Copy link
Member

Tricky to document... there's a real risk that we write something that differs from actual OBS behavior.

@hennevogel
Copy link
Member Author

Tricky to document...

How so? The rules are pretty simple and in code. It might be hard to keep it up to date, but that is true for all but broad stroke overview documentation...

@hellcp-work
Copy link
Contributor

That makes undesired behaviour all the more obvious. Documentation is how we intend the feature to work, if there are differences between the two, those are bugs

@smithfarm
Copy link
Member

Another observation: the OBS User Guide already has a chapter called "Authorization", but it also covers authentication...

@smithfarm
Copy link
Member

Oh, and there's also this: https://en.opensuse.org/openSUSE:Build_Service_Concept_ACL

@hennevogel
Copy link
Member Author

https://en.opensuse.org/openSUSE:Build_Service_Concept_ACL

This is not reality but fiction :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
content What we build and deliver feature Things that are not possible but should be possible user-guide
Projects
OBS Documentation Gaps
Status: Todo
Milestone
No milestone
Development

No branches or pull requests
3 participants
@hennevogel @smithfarm @hellcp-work