Hi Yali,
I'm not sure which your concern is about UI by Horizon or for a policy
in Congress.
On 2015/11/30 16:27, zhangyali (D) wrote:
Hi Tim,
In the implementation of Congress UI, I have realized that we need to
add role assignment. In many systems and cases, RBAC (Role-Based Access
Control) is an vital function which are beneficial to the division of work.
I think we should have “admin” and “tenant” user at least. The admin
user could define predicates or complicated relations used in the
violations, and tenant user could just use the predicates defined by
admin user.
A typical example is that, the owner of network connected to VM should
be in the same group with the owner of this VM. In this example,
same_group is a predicates or complicated relations. It should be
I think this depends on how admin writes policy and what service works
as Congress datasource. If admin want to adopt the policy to specific
tenant, user or group, admin writes an additional policy to affect them
by the policy.
defined by admin user. And this predicate could be used by any tenant
user. In this way, some typical or common predicates could be defined in
a individual admin board, and other tenant user could choose which one
to use.
On the other hand, this mentions about which user has permission to edit
and to see a policy by Horizon.
best regard,
Masahito
Yali
*发件人:*Tim Hinrichs [mailto:[email protected]]
*发送时间:*2015年11月30日10:37
*收件人:*zhangyali (D); OpenStack Development Mailing List (not for
usage questions)
*主题:*Re: [openstack-dev][congress]role in Congress
Hi Yali,
We didn't discuss role assignment for service users in Tokyo. Could you
explain a bit more what you need?
Tim
On Sun, Nov 29, 2015 at 7:33 PM zhangyali (D) <[email protected]
<mailto:[email protected]>> wrote:
Hi Tim and All,
I remember there is a topic named “role assignment for service
users”in the Tokyo Summit. Since I have not heard any message of
this topic. Does anyone could contribute some information for me? I
think it is vital for my design of Congress UI in horizon. Thanks a lot!
Best Regards,
Yali
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: [email protected]?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
--
室井 雅仁(Masahito MUROI)
Software Innovation Center, NTT
Tel: +81-422-59-4539，FAX: +81-422-59-2699
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: [email protected]?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
