ChistaDATA / chista-asabru

A protocol aware database proxy built in c++
https://docs.asabru.chistadata.io/
4 stars 1 forks source link

RBAC support in authorization #162

Closed sinsinan closed 5 months ago

sinsinan commented 5 months ago

Is your feature request related to a problem? Please describe. Managing individual permissions for each user is time-consuming and error-prone, making it difficult to ensure consistent access control across the system.

Describe the solution you'd like We would like to implement Role-Based Access Control (RBAC). This solution will allow users to define roles, assign specific permissions to these roles, and then assign roles to users. By doing so, we can manage permissions more efficiently and securely, ensuring that users have the appropriate access based on their roles.

Describe alternatives you've considered We considered continuing with our current approach of assigning individual permissions to each user. However, this method is not scalable and poses significant security risks.

Additional context Our authorization server is based on AFCAS. We plan to extend it to support RBAC by establishing root principals as roles and Our authorization server, based on AFCAS, already supports RBAC. We need to integrate this capability, allowing us to establish root principals as roles and add members as member principals.