Task #1467: Complete d1_schema changes for Authz and Authn. - Infrastructure - DataONE Tasks

Task #1467

Story #725: Create Authentication and Access control design specifications

Complete d1_schema changes for Authz and Authn.

Added by Matthew Jones over 13 years ago. Updated about 10 years ago.

Status:

In Progress

Priority:

Normal

Assignee:

Matthew Jones

Category:

Documentation

Target version:

Maintenance Backlog

Start date:

Due date:

% Done:

30%

Milestone:

2011-Block-2

Product Version:

Story Points:

Sprint:

History

#1 Updated by Matthew Jones over 13 years ago

Status changed from New to In Progress

#2 Updated by Matthew Jones over 13 years ago

Category set to Documentation
Milestone set to 2011-Block-2

Added new types for Authz and Authn, including AuthToken, AuthSession, Challenge, EncryptedNonce, X509Certificate, Person, Group, Principal, PrincipalList, and others.

Need to review these types with Dave and get feedback. If no comments, then can close this task.

#3 Updated by Dave Vieglais over 13 years ago

Only question is on Types.Permission. The interpretation of a permission is "Permissions are cumulative, in that higher level permissions include all of the priveledges of lower levels (e.g., given write access, one also implicitly has read access)."

This means that execute access implies WRITE and CHANGEPERMISSION access which seems a bit liberal.