On 2019-01-07 12:43, Piotr Strzyzewski wrote:
On Mon, Jan 07, 2019 at 11:34:17AM +0000, Nick Hilliard via db-wg wrote:
Cynthia Revström via db-wg wrote on 07/01/2019 11:31:
I do like this idea with a checkbox, it gives flexibility while still
achieving the goal.
it will work until the point that your LIR is large enough that you need
segmented / group access control for your DB objects. Then it will break.
Which could be easily resolved with creating and naming SSO-LIR groups
in LIR Portal and using them like that:
auth: SSO-LIR no.foobar.group1
or
auth: SSO-LIR no.foobar group1
Piotr
If this is implemented then think the 2nd option "SSO-LIR no.foobar
group1" is better.
Kind regards,
Cynthia Revström