Protect endpoints using an Authentication Service

epwr / distributed-ethnography

A system to run distributed ethnography

0 stars 0 forks source link

Protect endpoints using an Authentication Service #4

Open epwr opened 9 months ago

epwr commented 9 months ago

User Story

As the service maintainer, I want only users that have authenticated and been provided with the Admin permissions to be able to view the admin pages, or create and edit surveys.

Out of Scope

epwr commented 9 months ago

Likely need to decide a authorization plan when setting up authentication.

Authz idea:

RBAC to start with a list of admins. eventually a viewer role to see survey results.
ReBAC if/once there's a need to separate roles by survey.