Security layer

[wajda]

This is an umbrella issue for discussing and brainstorming security aspects of the system, basically those A's - Authentication, Authorisation, Access control, Auditing etc.

[wajda]

As a minimum, we need to implement an authorisation mechanism (OAuth, Kerberos) for both APIs, and access control on computational level lineage (expressions) and operation details, that might leak some sensitive meta-information about security jobs logic etc.

[wajda]

@arpanabsa