On Mon, Jan 07, 2019 at 11:34:17AM +0000, Nick Hilliard via db-wg wrote: > Cynthia Revström via db-wg wrote on 07/01/2019 11:31: >> I do like this idea with a checkbox, it gives flexibility while still >> achieving the goal. > > it will work until the point that your LIR is large enough that you need > segmented / group access control for your DB objects. Then it will break.
Which could be easily resolved with creating and naming SSO-LIR groups in LIR Portal and using them like that: auth: SSO-LIR no.foobar.group1 or auth: SSO-LIR no.foobar group1 Piotr -- Piotr Strzyżewski Silesian University of Technology, Computer Centre Gliwice, Poland
