Open sonots-zozo opened 5 years ago
We're now working on introducing access controller on digdag-server (https://github.com/treasure-data/digdag/pull/936). In default implementation, it allows everything, but we could make and load custom controller. For example, the custom loads some policies or a policy file at bootstrap and it prohibit users' actions (We still not decide how to define a policy though). So please wait for https://github.com/treasure-data/digdag/pull/936.
@muga I used to use Rundeck and its access control method was quite straight forward and convenient. I'm hoping this could a good reference. Rundeck Access Control Policy
@kulmam92 thanks! that might be good information to design custom (next default?) access controller. let us take a look.
In our operation rule, we allows editing digdag projects only from
digdag push
(to manage digdag projects with Infrastructure as codes manner). So, we want to prohibit users from usingEdit
button on digdag UI.