Details
-
New Feature
-
Resolution: Fixed
-
Major
-
2.01
-
None
-
-
Empty show more show less
Description
Currently, grants are more or less hard coded and implicit. We should abstract from what we have and introduce a new categroy called "Grant", where a Role is a collection of grants, just like a Group will be a collection of Users.
As grants we shall have what we have now but explicit instead of implicit. So we have
- read /write/deny on repository;
- admin users
- admin roles
- admin all
Plus things like
- delete node
- launch workflow
- ...
Checklists
Acceptance criteria