Sync tenant roles with global roles

TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 6 forks source link

Open byewokko opened 2 months ago

byewokko commented 2 months ago

Implements feature of syncing tenant roles with global roles. Tenant roles can be created from global roles as if from a template.
This sync is done automatically as a part of tenant creation call POST /tenant.
For tenants that already exist, this sync can be triggered by PUT /sync-roles/{tenant_id}.
This sync completely skips roles with access to one or more global-only resources (such as authz:superuser).