summaryrefslogtreecommitdiff
path: root/topics/authentication/authentication-authorisation-design.gmi
diff options
context:
space:
mode:
authorFrederick Muriuki Muriithi2022-10-31 07:14:50 +0300
committerFrederick Muriuki Muriithi2022-10-31 07:14:50 +0300
commit8a3950fa8d069639c5319dd175313378924029c5 (patch)
treecdbd8495689334c4e7fea64241f40355a9486298 /topics/authentication/authentication-authorisation-design.gmi
parent20d3dc728976dcb368c72685076b22a238c5d58a (diff)
downloadgn-gemtext-8a3950fa8d069639c5319dd175313378924029c5.tar.gz
Topics: topics/authentication/authentication-authorisation-design.gmi
* topics/authentication/authentication-authorisation-design.gmi: Add notes on groups and roles. Also link in related issues.
Diffstat (limited to 'topics/authentication/authentication-authorisation-design.gmi')
-rw-r--r--topics/authentication/authentication-authorisation-design.gmi12
1 files changed, 10 insertions, 2 deletions
diff --git a/topics/authentication/authentication-authorisation-design.gmi b/topics/authentication/authentication-authorisation-design.gmi
index e31b760..447e5fe 100644
--- a/topics/authentication/authentication-authorisation-design.gmi
+++ b/topics/authentication/authentication-authorisation-design.gmi
@@ -9,8 +9,8 @@
## Authorisation
* Users (authenticated)
-* Groups (users are members and you have a group leader) - every user belongs to one group!
-* Roles define access control (groups have flexible roles) - group can create unique roles
+* Groups (users are members and you have a group leader) - every user belongs to one group! Groups own the resources.
+* Roles define access control (groups have flexible roles) - group can create unique roles. Roles are essentially collections of privileges.
* Resources (pretty flexible, give access to roles) - every data resource is owned by one group!
* Some users can add themselves to groups/roles
* Local database should be independent from other services and copied as a file (SQLite with JSON?)
@@ -19,3 +19,11 @@
## Web front-end
* Web front-end which allows management of these users/groups/roles/resources
+
+## Some Related Issues
+
+The following issues are related to this topic.
+
+* issues/authorisation Clean Up Authorisation (contains extra info)
+* topics/authentication/replace-hard-coded-auth-with-gn-proxy Replace Hard coded authentication with gn-proxy
+* topics/authentication/user-info Put user info in the a/c name in the menu