1 files changed, 25 insertions, 0 deletions

diff --git a/issues/authentication_authorisation/rework-resources-system.gmi b/issues/authentication_authorisation/rework-resources-system.gmi
new file mode 100644
index 0000000..f3ba6f9
--- /dev/null
+++ b/issues/authentication_authorisation/rework-resources-system.gmi
@@ -0,0 +1,25 @@
+# Rework Resources
+
+## Tags
+
+* assigned: fredm
+* status: open
+* priority: medium
+* type: refactor, feature request, design change
+* keywords: auth, authorisation, resources, design change
+
+## Description
+
+The authorisation system uses the idea of "Resources" as its most basic model: users have privileges to act on resources.
+
+The problem is that this concept is not currently (as of 06 Sept 2023) implemented for the entire system: The only supported resources currently are:
+
+* Phenotype resources
+* Genotype resources
+* mRNA resources
+
+For the "system" itself, and "user groups" we have special cases to handle the user privileges.
+
+With the addition of case-attribute editing stuff, we also run into the issue where the current existing system is not generic enough, and the code thus needs yet another edge case.
+
+This means that there is a need to refactor the code to make the concept of a "resource" global, and any/all privileges a user has should act on a particular resource. We can then add the resource types/categories as we encounter them, without having to change most of the core code dealing with the authorisations.