odcs

#27 Enforce ACLs on the delete endpoint
Closed Opened by qwan.

Closed
Reopen Issue

Only grant delete permission to users in a particular group (e.g. 'admin').

AC:
1. Provide API for adding a user to a group.
2. Provide API for removing a user from a group.
3. Enable ACL for compose delete endpoint.
4. The requester should be logged in db.

Regarding item 1 and 2, in this solution we manage the group (e.g. 'admin') in odcs, there is a chance that the group name can exist in kerberos or OpenIDC, and since odcs will sync users and groups from the auth backend, we need to figure out how to deal with this.

There is another solution that we create the 'admin' group in auth backend and only sync groups and users from there, in this case we don't need to provide APIs for adding and removing users to/from a group, we need to evaluate on the two proposals.

Metadata Update from @qwan:
- Issue assigned to qwan

Metadata Update from @qwan:
- Issue status updated to: Closed (was: Open)

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/pungi/odcs/issues/27

Please continue any further discussion there.
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.