search

unity-sds / unity-data-services

Apache License 2.0
0 stars 3 forks source link

Create separate user roles for each tenant #431

Open ngachung opened 1 month ago

wphyojpl commented 1 week ago

Current testing plan: (In-progress)

Project 1 + Tenant 1 Project 1 + Tenant 2 Project 2 + Tenant 1 Project 2 + Tenant 2

User 1

Groups: Admin Group GroupA: Project1:Tenant1 (CRUD) GroupB: Project2:Tenant1 (R)

Map Group A to Project1:Tenant1 (CRUD) Add User 1 to Group A

Add collection for Project 1 + Tenant 1  = ok
    Add Granules
Add collection for Project 1 + Tenant 2  = error
Add collection for Project 2 + Tenant 1  = error
Add collection for Project 2 + Tenant 2  = error

Get collection for Project 1 + Tenant 1  = ok

Remove Uesr from Group A

Map Admin Group to Project 2 : Tenant 1 (CRUD) Add user to Admin Group Add collection for Project 2 + Tenant 1 = ok Add collection for Project 2 + Tenant 2 = error Get collection for Project 1 + Tenant 1 = ok Remove user from Admin Group

Map Group B to Project1:Tenant1 (CRUD) Add user to Group B Add collection for Project 2 + Tenant 1 = error Get collection for Project 2 + Tenant 1 = ok