treasure-data / digdag

Workload Automation System
https://www.digdag.io/
Apache License 2.0
1.31k stars 222 forks source link

[feature request] Add an option to remove Edit button on web UI #955

Open sonots-zozo opened 5 years ago

sonots-zozo commented 5 years ago

In our operation rule, we allows editing digdag projects only from digdag push (to manage digdag projects with Infrastructure as codes manner). So, we want to prohibit users from using Edit button on digdag UI.

muga commented 5 years ago

We're now working on introducing access controller on digdag-server (https://github.com/treasure-data/digdag/pull/936). In default implementation, it allows everything, but we could make and load custom controller. For example, the custom loads some policies or a policy file at bootstrap and it prohibit users' actions (We still not decide how to define a policy though). So please wait for https://github.com/treasure-data/digdag/pull/936.

kulmam92 commented 5 years ago

@muga I used to use Rundeck and its access control method was quite straight forward and convenient. I'm hoping this could a good reference. Rundeck Access Control Policy

muga commented 5 years ago

@kulmam92 thanks! that might be good information to design custom (next default?) access controller. let us take a look.