>
> how do we assign a set of roles to a group of users...?

We can create a new role with all the permissions of the set of roles.

user                       permission
user         role          permission
user     group     role    permission
user group department role permission
             ....

We can always add another layer, right? In each level we can still write
same functionality, but it becomes more manageable with each indirection.
But also don't we increase number of requests to the remote server [1] ?

Also - a group has it's own metadata too -  like - the email address...

We can still have Groups as a set of users but no permissions per group.

[1]
https://github.com/wso2/carbon-security/blob/master/components/org.wso2.carbon.security.caas/src/main/java/org/wso2/carbon/security/caas/user/core/store/AuthorizationStore.java#L101

-- 
With regards,
*Manu*ranga Perera.

phone : 071 7 70 20 50
mail : [email protected]
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to