qos: add flag to enable/disable role based authorization for transitions

dCache / dcache

dCache - a system for storing and retrieving huge amounts of data, distributed among a large number of heterogenous server nodes, under a single virtual filesystem tree with a variety of standard access methods

277 stars 132 forks source link

Motivation: in some deployments, when almost all users are allowed to perform QoS transitions a per-user or per-group access control makes no sense anymore and created an addition configuration overhead (for example, when user mapping comes from LDAP)

Modification: introduce a global enable/disable switch for role based authorization

Result: Admins have a possibility to disable RBAC

Fixes: #7498 Acked-by: Target: master, 9.2, 10.0 Require-book: no Require-notes: yes (cherry picked from commit d26b9ae03141835db34d5fa813005b5163354428)

dCache / dcache

qos: add flag to enable/disable role based authorization for transitions #7536