You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@stratos.apache.org by Imesh Gunaratne <im...@apache.org> on 2015/05/19 17:30:02 UTC
[Discuss] Simplifying User Permission Model
Hi Devs,
In this release we could not spend time on $subject. For simplicity shall
we refine it as follows:
Tenant Admin:
- User Management + All Stratos Features
Tenant User (User Role: Internal/user):
- All Stratos Features
Thanks
--
Imesh Gunaratne
Senior Technical Lead, WSO2
Committer & PMC Member, Apache Stratos
Re: [Discuss] Simplifying User Permission Model
Posted by Shavindri Dissanayake <sh...@wso2.com>.
Thank you Imesh! Will update the docs accordingly.
Thanks & Regards
Shavindri Dissanayake
Technical Writer
LinkedIn Profile
<https://www.linkedin.com/profile/view?id=112227277&trk=nav_responsive_tab_profile>
Mob: 0779966739
WSO2 Inc.
lean.enterprise.middleware
On Sat, May 23, 2015 at 11:02 AM, Imesh Gunaratne <im...@apache.org> wrote:
> Hi Shavindri,
>
> Thanks for updating it! I think according to the latest changes we need to
> remove the sub Tenant user roles. The list of default user roles would be:
>
> - Super Tenant Admin (All operations allowed)
> - Super Tenant User (All operations except for manage/view tenants &
> users allowed)
> - Tenant Admin (All operations except for manage/view tenants allowed)
> - Tenant User (All operations except for manage/view tenants & users
> allowed)
>
> Thanks
>
> On Fri, May 22, 2015 at 11:49 AM, Shavindri Dissanayake <
> shavindri@wso2.com> wrote:
>
>> Hi Devs,
>>
>> Based on the details discussed in the thread we have updated the wiki
>> mentioning that Stratos currently has a simplified user permission model
>> and that it can be customized accordingly. The user permission roles are
>> documented in [1].
>>
>> [1]
>> https://cwiki.apache.org/confluence/display/STRATOS/4.1.0+User+Roles+and+Permissions
>>
>>
>> Thanks & Regards
>> Shavindri Dissanayake
>> Technical Writer
>> LinkedIn Profile
>> <https://www.linkedin.com/profile/view?id=112227277&trk=nav_responsive_tab_profile>
>> Mob: 0779966739
>>
>> WSO2 Inc.
>> lean.enterprise.middleware
>>
>> On Thu, May 21, 2015 at 4:39 PM, Imesh Gunaratne <im...@apache.org>
>> wrote:
>>
>>> Hi Devs,
>>>
>>> Today I found a problem in the above model where Tenant Admin is not
>>> able to see the Stratos permission set because Tenant Admin is only allowed
>>> the permission resource path "/permission/admin".
>>>
>>> Therefore I moved the Stratos permission set to
>>> "/permission/admin/stratos":
>>>
>>>
>>>
>>> Thanks
>>>
>>> On Wed, May 20, 2015 at 9:05 PM, Imesh Gunaratne <im...@apache.org>
>>> wrote:
>>>
>>>> Hi Devs,
>>>>
>>>> As a part of this process I refined the Stratos permission set as
>>>> follows:
>>>>
>>>> \
>>>>
>>>> *New Permission Resource Paths*
>>>>
>>>> - /permission/stratos
>>>> - /permission/stratos/autoscalingPolicies
>>>> - /permission/stratos/autoscalingPolicies/manage
>>>> - /permission/stratos/autoscalingPolicies/view
>>>> - /permission/stratos/kubernetesClusters
>>>> - /permission/stratos/kubernetesClusters/manage
>>>> - /permission/stratos/kubernetesClusters/view
>>>> - /permission/stratos/applicationPolicies
>>>> - /permission/stratos/applicationPolicies/manage
>>>> - /permission/stratos/applicationPolicies/view
>>>> - /permission/stratos/cartridges
>>>> - /permission/stratos/cartridges/manage
>>>> - /permission/stratos/cartridges/view
>>>> - /permission/stratos/cartridgeGroups
>>>> - /permission/stratos/cartridgeGroups/manage
>>>> - /permission/stratos/cartridgeGroups/view
>>>> - /permission/stratos/deploymentPolicies
>>>> - /permission/stratos/deploymentPolicies/manage
>>>> - /permission/stratos/deploymentPolicies/view
>>>> - /permission/stratos/networkPartitions
>>>> - /permission/stratos/networkPartitions/manage
>>>> - /permission/stratos/networkPartitions/view
>>>> - /permission/stratos/applications
>>>> - /permission/stratos/applications/manage
>>>> - /permission/stratos/applications/view
>>>> - /permission/stratos/applicationSignUps
>>>> - /permission/stratos/applicationSignUps/manage
>>>> - /permission/stratos/applicationSignUps/view
>>>> - /permission/stratos/domainMappings
>>>> - /permission/stratos/domainMappings/manage
>>>> - /permission/stratos/domainMappings/view
>>>>
>>>> *Changes Done*
>>>>
>>>> - A new permissions set called "Stratos Permissions" was introduced
>>>> to isolate the Stratos specific permissions.
>>>> - For each Stratos entity two sub permissions were added: manage,
>>>> view.
>>>> - The REST API was updated with the new permission resources.
>>>> - The Web UI was updated to correctly handle permissions for Super
>>>> Tenant Admin, Super Tenant User, Tenant Admin, Tenant User.
>>>>
>>>> Thanks
>>>>
>>>>
>>>> On Wed, May 20, 2015 at 10:11 AM, Imesh Gunaratne <im...@apache.org>
>>>> wrote:
>>>>
>>>>> Thanks for the feedback everyone!
>>>>>
>>>>> Just to add to this, please note that the "Internal/user" is a default
>>>>> user role that we ship with the product but users could create their own
>>>>> user roles with the existing permission set and use.
>>>>>
>>>>> Thanks
>>>>>
>>>>> On Tue, May 19, 2015 at 9:34 PM, Reka Thirunavukkarasu <re...@wso2.com>
>>>>> wrote:
>>>>>
>>>>>> +1 for the approach.
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com>
>>>>>> wrote:
>>>>>>
>>>>>>> +1 for simplifying user permission model
>>>>>>>
>>>>>>> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pubudug@wso2.com
>>>>>>> > wrote:
>>>>>>>
>>>>>>>> +1
>>>>>>>>
>>>>>>>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>>>>>>>> vishanthb@wso2.com> wrote:
>>>>>>>>
>>>>>>>>> +1
>>>>>>>>>
>>>>>>>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <imesh@apache.org
>>>>>>>>> > wrote:
>>>>>>>>>
>>>>>>>>>> Hi Devs,
>>>>>>>>>>
>>>>>>>>>> In this release we could not spend time on $subject. For
>>>>>>>>>> simplicity shall we refine it as follows:
>>>>>>>>>>
>>>>>>>>>> Tenant Admin:
>>>>>>>>>> - User Management + All Stratos Features
>>>>>>>>>>
>>>>>>>>>> Tenant User (User Role: Internal/user):
>>>>>>>>>> - All Stratos Features
>>>>>>>>>>
>>>>>>>>>> Thanks
>>>>>>>>>>
>>>>>>>>>> --
>>>>>>>>>> Imesh Gunaratne
>>>>>>>>>>
>>>>>>>>>> Senior Technical Lead, WSO2
>>>>>>>>>> Committer & PMC Member, Apache Stratos
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> *Vishanth Balasubramaniam*
>>>>>>>>> Software Engineer
>>>>>>>>> WSO2 Inc.; http://wso2.com
>>>>>>>>> lean.enterprise.middleware
>>>>>>>>>
>>>>>>>>> mobile: *+94771737718*
>>>>>>>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>>
>>>>>>>> *Pubudu Gunatilaka*
>>>>>>>> Software Engineer
>>>>>>>> WSO2, Inc.: http://wso2.com
>>>>>>>> lean.enterprise.middleware
>>>>>>>> mobile: +94 77 4078049
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> *Dinithi De Silva*
>>>>>>> Associate Software Engineer, WSO2 Inc.
>>>>>>> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
>>>>>>> | a: #20, Palm Grove, Colombo 03
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Reka Thirunavukkarasu
>>>>>> Senior Software Engineer,
>>>>>> WSO2, Inc.:http://wso2.com,
>>>>>> Mobile: +94776442007
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Imesh Gunaratne
>>>>>
>>>>> Senior Technical Lead, WSO2
>>>>> Committer & PMC Member, Apache Stratos
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Imesh Gunaratne
>>>>
>>>> Senior Technical Lead, WSO2
>>>> Committer & PMC Member, Apache Stratos
>>>>
>>>
>>>
>>>
>>> --
>>> Imesh Gunaratne
>>>
>>> Senior Technical Lead, WSO2
>>> Committer & PMC Member, Apache Stratos
>>>
>>
>>
>
>
> --
> Imesh Gunaratne
>
> Senior Technical Lead, WSO2
> Committer & PMC Member, Apache Stratos
>
Re: [Discuss] Simplifying User Permission Model
Posted by Imesh Gunaratne <im...@apache.org>.
Hi Shavindri,
Thanks for updating it! I think according to the latest changes we need to
remove the sub Tenant user roles. The list of default user roles would be:
- Super Tenant Admin (All operations allowed)
- Super Tenant User (All operations except for manage/view tenants &
users allowed)
- Tenant Admin (All operations except for manage/view tenants allowed)
- Tenant User (All operations except for manage/view tenants & users
allowed)
Thanks
On Fri, May 22, 2015 at 11:49 AM, Shavindri Dissanayake <sh...@wso2.com>
wrote:
> Hi Devs,
>
> Based on the details discussed in the thread we have updated the wiki
> mentioning that Stratos currently has a simplified user permission model
> and that it can be customized accordingly. The user permission roles are
> documented in [1].
>
> [1]
> https://cwiki.apache.org/confluence/display/STRATOS/4.1.0+User+Roles+and+Permissions
>
>
> Thanks & Regards
> Shavindri Dissanayake
> Technical Writer
> LinkedIn Profile
> <https://www.linkedin.com/profile/view?id=112227277&trk=nav_responsive_tab_profile>
> Mob: 0779966739
>
> WSO2 Inc.
> lean.enterprise.middleware
>
> On Thu, May 21, 2015 at 4:39 PM, Imesh Gunaratne <im...@apache.org> wrote:
>
>> Hi Devs,
>>
>> Today I found a problem in the above model where Tenant Admin is not able
>> to see the Stratos permission set because Tenant Admin is only allowed the
>> permission resource path "/permission/admin".
>>
>> Therefore I moved the Stratos permission set to
>> "/permission/admin/stratos":
>>
>>
>>
>> Thanks
>>
>> On Wed, May 20, 2015 at 9:05 PM, Imesh Gunaratne <im...@apache.org>
>> wrote:
>>
>>> Hi Devs,
>>>
>>> As a part of this process I refined the Stratos permission set as
>>> follows:
>>>
>>> \
>>>
>>> *New Permission Resource Paths*
>>>
>>> - /permission/stratos
>>> - /permission/stratos/autoscalingPolicies
>>> - /permission/stratos/autoscalingPolicies/manage
>>> - /permission/stratos/autoscalingPolicies/view
>>> - /permission/stratos/kubernetesClusters
>>> - /permission/stratos/kubernetesClusters/manage
>>> - /permission/stratos/kubernetesClusters/view
>>> - /permission/stratos/applicationPolicies
>>> - /permission/stratos/applicationPolicies/manage
>>> - /permission/stratos/applicationPolicies/view
>>> - /permission/stratos/cartridges
>>> - /permission/stratos/cartridges/manage
>>> - /permission/stratos/cartridges/view
>>> - /permission/stratos/cartridgeGroups
>>> - /permission/stratos/cartridgeGroups/manage
>>> - /permission/stratos/cartridgeGroups/view
>>> - /permission/stratos/deploymentPolicies
>>> - /permission/stratos/deploymentPolicies/manage
>>> - /permission/stratos/deploymentPolicies/view
>>> - /permission/stratos/networkPartitions
>>> - /permission/stratos/networkPartitions/manage
>>> - /permission/stratos/networkPartitions/view
>>> - /permission/stratos/applications
>>> - /permission/stratos/applications/manage
>>> - /permission/stratos/applications/view
>>> - /permission/stratos/applicationSignUps
>>> - /permission/stratos/applicationSignUps/manage
>>> - /permission/stratos/applicationSignUps/view
>>> - /permission/stratos/domainMappings
>>> - /permission/stratos/domainMappings/manage
>>> - /permission/stratos/domainMappings/view
>>>
>>> *Changes Done*
>>>
>>> - A new permissions set called "Stratos Permissions" was introduced
>>> to isolate the Stratos specific permissions.
>>> - For each Stratos entity two sub permissions were added: manage,
>>> view.
>>> - The REST API was updated with the new permission resources.
>>> - The Web UI was updated to correctly handle permissions for Super
>>> Tenant Admin, Super Tenant User, Tenant Admin, Tenant User.
>>>
>>> Thanks
>>>
>>>
>>> On Wed, May 20, 2015 at 10:11 AM, Imesh Gunaratne <im...@apache.org>
>>> wrote:
>>>
>>>> Thanks for the feedback everyone!
>>>>
>>>> Just to add to this, please note that the "Internal/user" is a default
>>>> user role that we ship with the product but users could create their own
>>>> user roles with the existing permission set and use.
>>>>
>>>> Thanks
>>>>
>>>> On Tue, May 19, 2015 at 9:34 PM, Reka Thirunavukkarasu <re...@wso2.com>
>>>> wrote:
>>>>
>>>>> +1 for the approach.
>>>>>
>>>>>
>>>>>
>>>>> On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com>
>>>>> wrote:
>>>>>
>>>>>> +1 for simplifying user permission model
>>>>>>
>>>>>> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com>
>>>>>> wrote:
>>>>>>
>>>>>>> +1
>>>>>>>
>>>>>>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>>>>>>> vishanthb@wso2.com> wrote:
>>>>>>>
>>>>>>>> +1
>>>>>>>>
>>>>>>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>> Hi Devs,
>>>>>>>>>
>>>>>>>>> In this release we could not spend time on $subject. For
>>>>>>>>> simplicity shall we refine it as follows:
>>>>>>>>>
>>>>>>>>> Tenant Admin:
>>>>>>>>> - User Management + All Stratos Features
>>>>>>>>>
>>>>>>>>> Tenant User (User Role: Internal/user):
>>>>>>>>> - All Stratos Features
>>>>>>>>>
>>>>>>>>> Thanks
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> Imesh Gunaratne
>>>>>>>>>
>>>>>>>>> Senior Technical Lead, WSO2
>>>>>>>>> Committer & PMC Member, Apache Stratos
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> *Vishanth Balasubramaniam*
>>>>>>>> Software Engineer
>>>>>>>> WSO2 Inc.; http://wso2.com
>>>>>>>> lean.enterprise.middleware
>>>>>>>>
>>>>>>>> mobile: *+94771737718*
>>>>>>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>>
>>>>>>> *Pubudu Gunatilaka*
>>>>>>> Software Engineer
>>>>>>> WSO2, Inc.: http://wso2.com
>>>>>>> lean.enterprise.middleware
>>>>>>> mobile: +94 77 4078049
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> *Dinithi De Silva*
>>>>>> Associate Software Engineer, WSO2 Inc.
>>>>>> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
>>>>>> | a: #20, Palm Grove, Colombo 03
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Reka Thirunavukkarasu
>>>>> Senior Software Engineer,
>>>>> WSO2, Inc.:http://wso2.com,
>>>>> Mobile: +94776442007
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> Imesh Gunaratne
>>>>
>>>> Senior Technical Lead, WSO2
>>>> Committer & PMC Member, Apache Stratos
>>>>
>>>
>>>
>>>
>>> --
>>> Imesh Gunaratne
>>>
>>> Senior Technical Lead, WSO2
>>> Committer & PMC Member, Apache Stratos
>>>
>>
>>
>>
>> --
>> Imesh Gunaratne
>>
>> Senior Technical Lead, WSO2
>> Committer & PMC Member, Apache Stratos
>>
>
>
--
Imesh Gunaratne
Senior Technical Lead, WSO2
Committer & PMC Member, Apache Stratos
Re: [Discuss] Simplifying User Permission Model
Posted by Shavindri Dissanayake <sh...@wso2.com>.
Hi Devs,
Based on the details discussed in the thread we have updated the wiki
mentioning that Stratos currently has a simplified user permission model
and that it can be customized accordingly. The user permission roles are
documented in [1].
[1]
https://cwiki.apache.org/confluence/display/STRATOS/4.1.0+User+Roles+and+Permissions
Thanks & Regards
Shavindri Dissanayake
Technical Writer
LinkedIn Profile
<https://www.linkedin.com/profile/view?id=112227277&trk=nav_responsive_tab_profile>
Mob: 0779966739
WSO2 Inc.
lean.enterprise.middleware
On Thu, May 21, 2015 at 4:39 PM, Imesh Gunaratne <im...@apache.org> wrote:
> Hi Devs,
>
> Today I found a problem in the above model where Tenant Admin is not able
> to see the Stratos permission set because Tenant Admin is only allowed the
> permission resource path "/permission/admin".
>
> Therefore I moved the Stratos permission set to
> "/permission/admin/stratos":
>
>
>
> Thanks
>
> On Wed, May 20, 2015 at 9:05 PM, Imesh Gunaratne <im...@apache.org> wrote:
>
>> Hi Devs,
>>
>> As a part of this process I refined the Stratos permission set as follows:
>>
>> \
>>
>> *New Permission Resource Paths*
>>
>> - /permission/stratos
>> - /permission/stratos/autoscalingPolicies
>> - /permission/stratos/autoscalingPolicies/manage
>> - /permission/stratos/autoscalingPolicies/view
>> - /permission/stratos/kubernetesClusters
>> - /permission/stratos/kubernetesClusters/manage
>> - /permission/stratos/kubernetesClusters/view
>> - /permission/stratos/applicationPolicies
>> - /permission/stratos/applicationPolicies/manage
>> - /permission/stratos/applicationPolicies/view
>> - /permission/stratos/cartridges
>> - /permission/stratos/cartridges/manage
>> - /permission/stratos/cartridges/view
>> - /permission/stratos/cartridgeGroups
>> - /permission/stratos/cartridgeGroups/manage
>> - /permission/stratos/cartridgeGroups/view
>> - /permission/stratos/deploymentPolicies
>> - /permission/stratos/deploymentPolicies/manage
>> - /permission/stratos/deploymentPolicies/view
>> - /permission/stratos/networkPartitions
>> - /permission/stratos/networkPartitions/manage
>> - /permission/stratos/networkPartitions/view
>> - /permission/stratos/applications
>> - /permission/stratos/applications/manage
>> - /permission/stratos/applications/view
>> - /permission/stratos/applicationSignUps
>> - /permission/stratos/applicationSignUps/manage
>> - /permission/stratos/applicationSignUps/view
>> - /permission/stratos/domainMappings
>> - /permission/stratos/domainMappings/manage
>> - /permission/stratos/domainMappings/view
>>
>> *Changes Done*
>>
>> - A new permissions set called "Stratos Permissions" was introduced
>> to isolate the Stratos specific permissions.
>> - For each Stratos entity two sub permissions were added: manage,
>> view.
>> - The REST API was updated with the new permission resources.
>> - The Web UI was updated to correctly handle permissions for Super
>> Tenant Admin, Super Tenant User, Tenant Admin, Tenant User.
>>
>> Thanks
>>
>>
>> On Wed, May 20, 2015 at 10:11 AM, Imesh Gunaratne <im...@apache.org>
>> wrote:
>>
>>> Thanks for the feedback everyone!
>>>
>>> Just to add to this, please note that the "Internal/user" is a default
>>> user role that we ship with the product but users could create their own
>>> user roles with the existing permission set and use.
>>>
>>> Thanks
>>>
>>> On Tue, May 19, 2015 at 9:34 PM, Reka Thirunavukkarasu <re...@wso2.com>
>>> wrote:
>>>
>>>> +1 for the approach.
>>>>
>>>>
>>>>
>>>> On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com>
>>>> wrote:
>>>>
>>>>> +1 for simplifying user permission model
>>>>>
>>>>> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com>
>>>>> wrote:
>>>>>
>>>>>> +1
>>>>>>
>>>>>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>>>>>> vishanthb@wso2.com> wrote:
>>>>>>
>>>>>>> +1
>>>>>>>
>>>>>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> Hi Devs,
>>>>>>>>
>>>>>>>> In this release we could not spend time on $subject. For simplicity
>>>>>>>> shall we refine it as follows:
>>>>>>>>
>>>>>>>> Tenant Admin:
>>>>>>>> - User Management + All Stratos Features
>>>>>>>>
>>>>>>>> Tenant User (User Role: Internal/user):
>>>>>>>> - All Stratos Features
>>>>>>>>
>>>>>>>> Thanks
>>>>>>>>
>>>>>>>> --
>>>>>>>> Imesh Gunaratne
>>>>>>>>
>>>>>>>> Senior Technical Lead, WSO2
>>>>>>>> Committer & PMC Member, Apache Stratos
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> *Vishanth Balasubramaniam*
>>>>>>> Software Engineer
>>>>>>> WSO2 Inc.; http://wso2.com
>>>>>>> lean.enterprise.middleware
>>>>>>>
>>>>>>> mobile: *+94771737718*
>>>>>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>>
>>>>>> *Pubudu Gunatilaka*
>>>>>> Software Engineer
>>>>>> WSO2, Inc.: http://wso2.com
>>>>>> lean.enterprise.middleware
>>>>>> mobile: +94 77 4078049
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> *Dinithi De Silva*
>>>>> Associate Software Engineer, WSO2 Inc.
>>>>> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
>>>>> | a: #20, Palm Grove, Colombo 03
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Reka Thirunavukkarasu
>>>> Senior Software Engineer,
>>>> WSO2, Inc.:http://wso2.com,
>>>> Mobile: +94776442007
>>>>
>>>>
>>>>
>>>
>>>
>>> --
>>> Imesh Gunaratne
>>>
>>> Senior Technical Lead, WSO2
>>> Committer & PMC Member, Apache Stratos
>>>
>>
>>
>>
>> --
>> Imesh Gunaratne
>>
>> Senior Technical Lead, WSO2
>> Committer & PMC Member, Apache Stratos
>>
>
>
>
> --
> Imesh Gunaratne
>
> Senior Technical Lead, WSO2
> Committer & PMC Member, Apache Stratos
>
Re: [Discuss] Simplifying User Permission Model
Posted by Imesh Gunaratne <im...@apache.org>.
Hi Devs,
Today I found a problem in the above model where Tenant Admin is not able
to see the Stratos permission set because Tenant Admin is only allowed the
permission resource path "/permission/admin".
Therefore I moved the Stratos permission set to "/permission/admin/stratos":
Thanks
On Wed, May 20, 2015 at 9:05 PM, Imesh Gunaratne <im...@apache.org> wrote:
> Hi Devs,
>
> As a part of this process I refined the Stratos permission set as follows:
>
> \
>
> *New Permission Resource Paths*
>
> - /permission/stratos
> - /permission/stratos/autoscalingPolicies
> - /permission/stratos/autoscalingPolicies/manage
> - /permission/stratos/autoscalingPolicies/view
> - /permission/stratos/kubernetesClusters
> - /permission/stratos/kubernetesClusters/manage
> - /permission/stratos/kubernetesClusters/view
> - /permission/stratos/applicationPolicies
> - /permission/stratos/applicationPolicies/manage
> - /permission/stratos/applicationPolicies/view
> - /permission/stratos/cartridges
> - /permission/stratos/cartridges/manage
> - /permission/stratos/cartridges/view
> - /permission/stratos/cartridgeGroups
> - /permission/stratos/cartridgeGroups/manage
> - /permission/stratos/cartridgeGroups/view
> - /permission/stratos/deploymentPolicies
> - /permission/stratos/deploymentPolicies/manage
> - /permission/stratos/deploymentPolicies/view
> - /permission/stratos/networkPartitions
> - /permission/stratos/networkPartitions/manage
> - /permission/stratos/networkPartitions/view
> - /permission/stratos/applications
> - /permission/stratos/applications/manage
> - /permission/stratos/applications/view
> - /permission/stratos/applicationSignUps
> - /permission/stratos/applicationSignUps/manage
> - /permission/stratos/applicationSignUps/view
> - /permission/stratos/domainMappings
> - /permission/stratos/domainMappings/manage
> - /permission/stratos/domainMappings/view
>
> *Changes Done*
>
> - A new permissions set called "Stratos Permissions" was introduced to
> isolate the Stratos specific permissions.
> - For each Stratos entity two sub permissions were added: manage, view.
> - The REST API was updated with the new permission resources.
> - The Web UI was updated to correctly handle permissions for Super
> Tenant Admin, Super Tenant User, Tenant Admin, Tenant User.
>
> Thanks
>
>
> On Wed, May 20, 2015 at 10:11 AM, Imesh Gunaratne <im...@apache.org>
> wrote:
>
>> Thanks for the feedback everyone!
>>
>> Just to add to this, please note that the "Internal/user" is a default
>> user role that we ship with the product but users could create their own
>> user roles with the existing permission set and use.
>>
>> Thanks
>>
>> On Tue, May 19, 2015 at 9:34 PM, Reka Thirunavukkarasu <re...@wso2.com>
>> wrote:
>>
>>> +1 for the approach.
>>>
>>>
>>>
>>> On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com>
>>> wrote:
>>>
>>>> +1 for simplifying user permission model
>>>>
>>>> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com>
>>>> wrote:
>>>>
>>>>> +1
>>>>>
>>>>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>>>>> vishanthb@wso2.com> wrote:
>>>>>
>>>>>> +1
>>>>>>
>>>>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>>>>>> wrote:
>>>>>>
>>>>>>> Hi Devs,
>>>>>>>
>>>>>>> In this release we could not spend time on $subject. For simplicity
>>>>>>> shall we refine it as follows:
>>>>>>>
>>>>>>> Tenant Admin:
>>>>>>> - User Management + All Stratos Features
>>>>>>>
>>>>>>> Tenant User (User Role: Internal/user):
>>>>>>> - All Stratos Features
>>>>>>>
>>>>>>> Thanks
>>>>>>>
>>>>>>> --
>>>>>>> Imesh Gunaratne
>>>>>>>
>>>>>>> Senior Technical Lead, WSO2
>>>>>>> Committer & PMC Member, Apache Stratos
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> *Vishanth Balasubramaniam*
>>>>>> Software Engineer
>>>>>> WSO2 Inc.; http://wso2.com
>>>>>> lean.enterprise.middleware
>>>>>>
>>>>>> mobile: *+94771737718*
>>>>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>>
>>>>> *Pubudu Gunatilaka*
>>>>> Software Engineer
>>>>> WSO2, Inc.: http://wso2.com
>>>>> lean.enterprise.middleware
>>>>> mobile: +94 77 4078049
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> *Dinithi De Silva*
>>>> Associate Software Engineer, WSO2 Inc.
>>>> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
>>>> | a: #20, Palm Grove, Colombo 03
>>>>
>>>
>>>
>>>
>>> --
>>> Reka Thirunavukkarasu
>>> Senior Software Engineer,
>>> WSO2, Inc.:http://wso2.com,
>>> Mobile: +94776442007
>>>
>>>
>>>
>>
>>
>> --
>> Imesh Gunaratne
>>
>> Senior Technical Lead, WSO2
>> Committer & PMC Member, Apache Stratos
>>
>
>
>
> --
> Imesh Gunaratne
>
> Senior Technical Lead, WSO2
> Committer & PMC Member, Apache Stratos
>
--
Imesh Gunaratne
Senior Technical Lead, WSO2
Committer & PMC Member, Apache Stratos
Re: [Discuss] Simplifying User Permission Model
Posted by Imesh Gunaratne <im...@apache.org>.
Hi Devs,
As a part of this process I refined the Stratos permission set as follows:
\
*New Permission Resource Paths*
- /permission/stratos
- /permission/stratos/autoscalingPolicies
- /permission/stratos/autoscalingPolicies/manage
- /permission/stratos/autoscalingPolicies/view
- /permission/stratos/kubernetesClusters
- /permission/stratos/kubernetesClusters/manage
- /permission/stratos/kubernetesClusters/view
- /permission/stratos/applicationPolicies
- /permission/stratos/applicationPolicies/manage
- /permission/stratos/applicationPolicies/view
- /permission/stratos/cartridges
- /permission/stratos/cartridges/manage
- /permission/stratos/cartridges/view
- /permission/stratos/cartridgeGroups
- /permission/stratos/cartridgeGroups/manage
- /permission/stratos/cartridgeGroups/view
- /permission/stratos/deploymentPolicies
- /permission/stratos/deploymentPolicies/manage
- /permission/stratos/deploymentPolicies/view
- /permission/stratos/networkPartitions
- /permission/stratos/networkPartitions/manage
- /permission/stratos/networkPartitions/view
- /permission/stratos/applications
- /permission/stratos/applications/manage
- /permission/stratos/applications/view
- /permission/stratos/applicationSignUps
- /permission/stratos/applicationSignUps/manage
- /permission/stratos/applicationSignUps/view
- /permission/stratos/domainMappings
- /permission/stratos/domainMappings/manage
- /permission/stratos/domainMappings/view
*Changes Done*
- A new permissions set called "Stratos Permissions" was introduced to
isolate the Stratos specific permissions.
- For each Stratos entity two sub permissions were added: manage, view.
- The REST API was updated with the new permission resources.
- The Web UI was updated to correctly handle permissions for Super
Tenant Admin, Super Tenant User, Tenant Admin, Tenant User.
Thanks
On Wed, May 20, 2015 at 10:11 AM, Imesh Gunaratne <im...@apache.org> wrote:
> Thanks for the feedback everyone!
>
> Just to add to this, please note that the "Internal/user" is a default
> user role that we ship with the product but users could create their own
> user roles with the existing permission set and use.
>
> Thanks
>
> On Tue, May 19, 2015 at 9:34 PM, Reka Thirunavukkarasu <re...@wso2.com>
> wrote:
>
>> +1 for the approach.
>>
>>
>>
>> On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com>
>> wrote:
>>
>>> +1 for simplifying user permission model
>>>
>>> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com>
>>> wrote:
>>>
>>>> +1
>>>>
>>>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>>>> vishanthb@wso2.com> wrote:
>>>>
>>>>> +1
>>>>>
>>>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>>>>> wrote:
>>>>>
>>>>>> Hi Devs,
>>>>>>
>>>>>> In this release we could not spend time on $subject. For simplicity
>>>>>> shall we refine it as follows:
>>>>>>
>>>>>> Tenant Admin:
>>>>>> - User Management + All Stratos Features
>>>>>>
>>>>>> Tenant User (User Role: Internal/user):
>>>>>> - All Stratos Features
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> --
>>>>>> Imesh Gunaratne
>>>>>>
>>>>>> Senior Technical Lead, WSO2
>>>>>> Committer & PMC Member, Apache Stratos
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> *Vishanth Balasubramaniam*
>>>>> Software Engineer
>>>>> WSO2 Inc.; http://wso2.com
>>>>> lean.enterprise.middleware
>>>>>
>>>>> mobile: *+94771737718*
>>>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> *Pubudu Gunatilaka*
>>>> Software Engineer
>>>> WSO2, Inc.: http://wso2.com
>>>> lean.enterprise.middleware
>>>> mobile: +94 77 4078049
>>>>
>>>
>>>
>>>
>>> --
>>> *Dinithi De Silva*
>>> Associate Software Engineer, WSO2 Inc.
>>> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
>>> | a: #20, Palm Grove, Colombo 03
>>>
>>
>>
>>
>> --
>> Reka Thirunavukkarasu
>> Senior Software Engineer,
>> WSO2, Inc.:http://wso2.com,
>> Mobile: +94776442007
>>
>>
>>
>
>
> --
> Imesh Gunaratne
>
> Senior Technical Lead, WSO2
> Committer & PMC Member, Apache Stratos
>
--
Imesh Gunaratne
Senior Technical Lead, WSO2
Committer & PMC Member, Apache Stratos
Re: [Discuss] Simplifying User Permission Model
Posted by Imesh Gunaratne <im...@apache.org>.
Thanks for the feedback everyone!
Just to add to this, please note that the "Internal/user" is a default user
role that we ship with the product but users could create their own user
roles with the existing permission set and use.
Thanks
On Tue, May 19, 2015 at 9:34 PM, Reka Thirunavukkarasu <re...@wso2.com>
wrote:
> +1 for the approach.
>
>
>
> On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com>
> wrote:
>
>> +1 for simplifying user permission model
>>
>> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com>
>> wrote:
>>
>>> +1
>>>
>>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>>> vishanthb@wso2.com> wrote:
>>>
>>>> +1
>>>>
>>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>>>> wrote:
>>>>
>>>>> Hi Devs,
>>>>>
>>>>> In this release we could not spend time on $subject. For simplicity
>>>>> shall we refine it as follows:
>>>>>
>>>>> Tenant Admin:
>>>>> - User Management + All Stratos Features
>>>>>
>>>>> Tenant User (User Role: Internal/user):
>>>>> - All Stratos Features
>>>>>
>>>>> Thanks
>>>>>
>>>>> --
>>>>> Imesh Gunaratne
>>>>>
>>>>> Senior Technical Lead, WSO2
>>>>> Committer & PMC Member, Apache Stratos
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> *Vishanth Balasubramaniam*
>>>> Software Engineer
>>>> WSO2 Inc.; http://wso2.com
>>>> lean.enterprise.middleware
>>>>
>>>> mobile: *+94771737718*
>>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>>
>>>>
>>>
>>>
>>> --
>>>
>>> *Pubudu Gunatilaka*
>>> Software Engineer
>>> WSO2, Inc.: http://wso2.com
>>> lean.enterprise.middleware
>>> mobile: +94 77 4078049
>>>
>>
>>
>>
>> --
>> *Dinithi De Silva*
>> Associate Software Engineer, WSO2 Inc.
>> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
>> | a: #20, Palm Grove, Colombo 03
>>
>
>
>
> --
> Reka Thirunavukkarasu
> Senior Software Engineer,
> WSO2, Inc.:http://wso2.com,
> Mobile: +94776442007
>
>
>
--
Imesh Gunaratne
Senior Technical Lead, WSO2
Committer & PMC Member, Apache Stratos
Re: [Discuss] Simplifying User Permission Model
Posted by Reka Thirunavukkarasu <re...@wso2.com>.
+1 for the approach.
On Tue, May 19, 2015 at 9:07 PM, Dinithi De Silva <di...@wso2.com> wrote:
> +1 for simplifying user permission model
>
> On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com>
> wrote:
>
>> +1
>>
>> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
>> vishanthb@wso2.com> wrote:
>>
>>> +1
>>>
>>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>>> wrote:
>>>
>>>> Hi Devs,
>>>>
>>>> In this release we could not spend time on $subject. For simplicity
>>>> shall we refine it as follows:
>>>>
>>>> Tenant Admin:
>>>> - User Management + All Stratos Features
>>>>
>>>> Tenant User (User Role: Internal/user):
>>>> - All Stratos Features
>>>>
>>>> Thanks
>>>>
>>>> --
>>>> Imesh Gunaratne
>>>>
>>>> Senior Technical Lead, WSO2
>>>> Committer & PMC Member, Apache Stratos
>>>>
>>>
>>>
>>>
>>> --
>>> *Vishanth Balasubramaniam*
>>> Software Engineer
>>> WSO2 Inc.; http://wso2.com
>>> lean.enterprise.middleware
>>>
>>> mobile: *+94771737718*
>>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>>
>>>
>>
>>
>> --
>>
>> *Pubudu Gunatilaka*
>> Software Engineer
>> WSO2, Inc.: http://wso2.com
>> lean.enterprise.middleware
>> mobile: +94 77 4078049
>>
>
>
>
> --
> *Dinithi De Silva*
> Associate Software Engineer, WSO2 Inc.
> m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
> | a: #20, Palm Grove, Colombo 03
>
--
Reka Thirunavukkarasu
Senior Software Engineer,
WSO2, Inc.:http://wso2.com,
Mobile: +94776442007
Re: [Discuss] Simplifying User Permission Model
Posted by Dinithi De Silva <di...@wso2.com>.
+1 for simplifying user permission model
On Tue, May 19, 2015 at 9:06 PM, Pubudu Gunatilaka <pu...@wso2.com> wrote:
> +1
>
> On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
> vishanthb@wso2.com> wrote:
>
>> +1
>>
>> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org>
>> wrote:
>>
>>> Hi Devs,
>>>
>>> In this release we could not spend time on $subject. For simplicity
>>> shall we refine it as follows:
>>>
>>> Tenant Admin:
>>> - User Management + All Stratos Features
>>>
>>> Tenant User (User Role: Internal/user):
>>> - All Stratos Features
>>>
>>> Thanks
>>>
>>> --
>>> Imesh Gunaratne
>>>
>>> Senior Technical Lead, WSO2
>>> Committer & PMC Member, Apache Stratos
>>>
>>
>>
>>
>> --
>> *Vishanth Balasubramaniam*
>> Software Engineer
>> WSO2 Inc.; http://wso2.com
>> lean.enterprise.middleware
>>
>> mobile: *+94771737718*
>> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>>
>>
>
>
> --
>
> *Pubudu Gunatilaka*
> Software Engineer
> WSO2, Inc.: http://wso2.com
> lean.enterprise.middleware
> mobile: +94 77 4078049
>
--
*Dinithi De Silva*
Associate Software Engineer, WSO2 Inc.
m:+94716667655 | e:dinithis@wso2.com | w: www.wso2.com
| a: #20, Palm Grove, Colombo 03
Re: [Discuss] Simplifying User Permission Model
Posted by Pubudu Gunatilaka <pu...@wso2.com>.
+1
On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
vishanthb@wso2.com> wrote:
> +1
>
> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org> wrote:
>
>> Hi Devs,
>>
>> In this release we could not spend time on $subject. For simplicity shall
>> we refine it as follows:
>>
>> Tenant Admin:
>> - User Management + All Stratos Features
>>
>> Tenant User (User Role: Internal/user):
>> - All Stratos Features
>>
>> Thanks
>>
>> --
>> Imesh Gunaratne
>>
>> Senior Technical Lead, WSO2
>> Committer & PMC Member, Apache Stratos
>>
>
>
>
> --
> *Vishanth Balasubramaniam*
> Software Engineer
> WSO2 Inc.; http://wso2.com
> lean.enterprise.middleware
>
> mobile: *+94771737718*
> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>
>
--
*Pubudu Gunatilaka*
Software Engineer
WSO2, Inc.: http://wso2.com
lean.enterprise.middleware
mobile: +94 77 4078049
Re: [Discuss] Simplifying User Permission Model
Posted by Anuruddha Liyanarachchi <an...@wso2.com>.
+1 for simple model for this release.
On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
vishanthb@wso2.com> wrote:
> +1
>
> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org> wrote:
>
>> Hi Devs,
>>
>> In this release we could not spend time on $subject. For simplicity shall
>> we refine it as follows:
>>
>> Tenant Admin:
>> - User Management + All Stratos Features
>>
>> Tenant User (User Role: Internal/user):
>> - All Stratos Features
>>
>> Thanks
>>
>> --
>> Imesh Gunaratne
>>
>> Senior Technical Lead, WSO2
>> Committer & PMC Member, Apache Stratos
>>
>
>
>
> --
> *Vishanth Balasubramaniam*
> Software Engineer
> WSO2 Inc.; http://wso2.com
> lean.enterprise.middleware
>
> mobile: *+94771737718*
> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>
>
--
*Thanks and Regards,*
Anuruddha Lanka Liyanarachchi
Software Engineer - WSO2
Mobile : +94 (0) 712762611
Tel : +94 112 145 345
a <th...@wso2.com>nuruddhal@wso2.com
Re: [Discuss] Simplifying User Permission Model
Posted by Chamila De Alwis <ch...@wso2.com>.
+1 for this approach. Better to keep it simple.
Regards,
Chamila de Alwis
Software Engineer | WSO2 | +94772207163
Blog: code.chamiladealwis.com
On Tue, May 19, 2015 at 9:02 PM, Vishanth Balasubramaniam <
vishanthb@wso2.com> wrote:
> +1
>
> On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org> wrote:
>
>> Hi Devs,
>>
>> In this release we could not spend time on $subject. For simplicity shall
>> we refine it as follows:
>>
>> Tenant Admin:
>> - User Management + All Stratos Features
>>
>> Tenant User (User Role: Internal/user):
>> - All Stratos Features
>>
>> Thanks
>>
>> --
>> Imesh Gunaratne
>>
>> Senior Technical Lead, WSO2
>> Committer & PMC Member, Apache Stratos
>>
>
>
>
> --
> *Vishanth Balasubramaniam*
> Software Engineer
> WSO2 Inc.; http://wso2.com
> lean.enterprise.middleware
>
> mobile: *+94771737718*
> about me: *http://about.me/vishanth <http://about.me/vishanth>*
>
>
Re: [Discuss] Simplifying User Permission Model
Posted by Vishanth Balasubramaniam <vi...@wso2.com>.
+1
On Tue, May 19, 2015 at 9:00 PM, Imesh Gunaratne <im...@apache.org> wrote:
> Hi Devs,
>
> In this release we could not spend time on $subject. For simplicity shall
> we refine it as follows:
>
> Tenant Admin:
> - User Management + All Stratos Features
>
> Tenant User (User Role: Internal/user):
> - All Stratos Features
>
> Thanks
>
> --
> Imesh Gunaratne
>
> Senior Technical Lead, WSO2
> Committer & PMC Member, Apache Stratos
>
--
*Vishanth Balasubramaniam*
Software Engineer
WSO2 Inc.; http://wso2.com
lean.enterprise.middleware
mobile: *+94771737718*
about me: *http://about.me/vishanth <http://about.me/vishanth>*