Authorization - Githubissues

openSUSE / obs-docu

Official Open Build Service Documentation. Content gets reviewed and edited. Generated books are available at http://www.openbuildservice.org

34 stars 70 forks source link

Authorization #379

Open hennevogel opened 2 months ago

hennevogel commented 2 months ago

Who can do what on OBS. This includes

Global Roles (Admin)
Project/Package Roles (maintainer etc.)
Permission inheritance (sub-projects)
Permissions in specific workflows (sources, triggers, requests etc.)

smithfarm commented 2 months ago

Tricky to document... there's a real risk that we write something that differs from actual OBS behavior.

hennevogel commented 2 months ago

Tricky to document...

How so? The rules are pretty simple and in code. It might be hard to keep it up to date, but that is true for all but broad stroke overview documentation...

hellcp-work commented 2 months ago

That makes undesired behaviour all the more obvious. Documentation is how we intend the feature to work, if there are differences between the two, those are bugs

smithfarm commented 2 months ago

Another observation: the OBS User Guide already has a chapter called "Authorization", but it also covers authentication...

smithfarm commented 2 months ago

Oh, and there's also this: https://en.opensuse.org/openSUSE:Build_Service_Concept_ACL

hennevogel commented 2 months ago

https://en.opensuse.org/openSUSE:Build_Service_Concept_ACL

This is not reality but fiction :)