Re: Model of permissions for Ignite 3

2021-09-28 Thread Valentin Kulichenko
Hi Denis, Did you make any progress on this topic? -Val On Wed, Apr 21, 2021 at 6:11 AM Valentin Kulichenko < valentin.kuliche...@gmail.com> wrote: > Danis, > > Got it, thanks. Please provide the link to the IEP when you have one, I’d > be happy to review! > > -Val > > On Tue, Apr 20, 2021 at

Re: Model of permissions for Ignite 3

2021-04-20 Thread Valentin Kulichenko
Danis, Got it, thanks. Please provide the link to the IEP when you have one, I’d be happy to review! -Val On Tue, Apr 20, 2021 at 12:21 AM Denis Garus wrote: > Hello! > > We arranged that I prepare an IEP. > If you have some ideas about what should be reflected in this IEP, do not > hesitate

Re: Model of permissions for Ignite 3

2021-04-20 Thread Denis Garus
Hello! We arranged that I prepare an IEP. If you have some ideas about what should be reflected in this IEP, do not hesitate to let me know. вт, 20 апр. 2021 г. в 02:06, Valentin Kulichenko < valentin.kuliche...@gmail.com>: > Hi folks, > > Did you have a discussion? How did it go? Can someone

Re: Model of permissions for Ignite 3

2021-04-19 Thread Valentin Kulichenko
Hi folks, Did you have a discussion? How did it go? Can someone summarize the results? -Val On Mon, Apr 12, 2021 at 2:00 AM Kseniya Romanova wrote: > Hi! Scheduled open call for Friday > https://www.meetup.com/Moscow-Apache-Ignite-Meetup/events/277518672/ > Please join to see the zoom link.

Re: Model of permissions for Ignite 3

2021-04-12 Thread Kseniya Romanova
Hi! Scheduled open call for Friday https://www.meetup.com/Moscow-Apache-Ignite-Meetup/events/277518672/ Please join to see the zoom link. Consulted with Denis Garus and put the topic as "Security", cause it's definitely wider than just permissions. Cheers! пн, 12 апр. 2021 г. в 09:25, Alexei

Re: Model of permissions for Ignite 3

2021-04-12 Thread Alexei Scherbakov
+1 We should rethink the security model in Ignite 3 and have a default RBAC based implementation, from my point of view. By default, no code should be written to enable and use it. Let's schedule a meeting and discuss the details. вс, 11 апр. 2021 г. в 19:43, Denis Garus : > Andrey, Alexey

Re: Model of permissions for Ignite 3

2021-04-11 Thread Denis Garus
Andrey, Alexey thank you for the feedback! > I suggest decoupling authentication from authorization Yes, it would be useful. Existing SecuritySubject and SecurityContext require reworking. > I think it would be great to have a default implementation of user-role-permission model Completely

Re: Model of permissions for Ignite 3

2021-04-09 Thread Alexey Goncharuk
Hello Denis, Andrey, Igniters, Why don't we take a step further in improving the security model in Ignite 3? I think it would be great to have a default implementation of user-role-permission model in Ignite to be on par with security models of widely-used databases. This will complement

Re: Model of permissions for Ignite 3

2021-04-08 Thread Andrey Kuznetsov
Hi Denis! The idea and prototype look great. I'd like to highlight one arguable point. Default authorization implementation still assumes there are permissions provided in SecuritySubject. In turn, authentication is still responsible for filling these permissions. I suggest decoupling

Re: Model of permissions for Ignite 3

2021-04-08 Thread Denis Garus
Sorry, I forgot to point the link 1. https://github.com/apache/ignite/pull/8989 чт, 8 апр. 2021 г. в 17:50, Denis Garus : > Hello, Igniters! > > I want to propose to improve the way which we use > to present permissions in Ignite 3. > > The model of permission in Ignite has a set of drawbacks.