Re: multiple tenancy/scoped roles in ISIS security

2016-02-23 Thread Jeroen van der Wal
Thanks for adding some food for thought Oscar. There are more ways that lead to Rome [1] but with the given scenario I still would model it as part of the domain, rely on database queries for performance and maybe use app tenancy as a safeguard. Just a matter of taste I guess. [1]

Re: multiple tenancy/scoped roles in ISIS security

2016-02-23 Thread Ć“scar Bou - GOVERTIS
Hi David and Jeroen, Current Isis Security add-on has an interface, "WithApplicationTenancyā€¯, that can also be used to apply custom domain/business logic to resolve the Application Tenancy to assign to a given entity. By means of the tenancy path returned, you can determine the permissions

Re: multiple tenancy/scoped roles in ISIS security

2016-02-23 Thread Jeroen van der Wal
Hi David, Currently in isis-module-security a user can have multiple roles (general admin, financial admin, etc) and a single application tenancy (your regatta) which is not a perfect match for your requirements. Personally I would model an tuple entity like RegattaRole to specify the user,

multiple tenancy/scoped roles in ISIS security

2016-02-23 Thread David Soff
Hello, I have been playing with ISIS some more and have a question concerning multiple tenancies for a single user. The application I am working on is a rowing regatta management system. I would like users to have scoped roles so that user A can be: - a general admin for regatta A - a financial