[jira] [Commented] (FINERACT-1988) Modular Security Architecture: Phase 5

["Siva Sai Udayagiri (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FINERACT-1988?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18099901#comment-18099901 ] 

Siva Sai Udayagiri commented on FINERACT-1988:
----------------------------------------------

Hi, I reviewed the current {{develop}} branch for this issue. I could not find an existing OPA/Rego implementation or a related completed PR.

Fineract’s security architecture appears to have changed since this issue was created, including OAuth2/OIDC support and more authorization rules using Spring Security’s {{{}AuthorizationManager{}}}. Existing authorization still seems to rely mainly on Fineract roles, permissions, and command-level checks.

Is FINERACT-1988 still valid with the original scope? If it is, could you please confirm where maintainers would prefer OPA to integrate with the current architecture?

I would like to start with a small, reviewable PR, possibly an optional authorization-provider extension point and configuration structure, rather than implementing the full OPA integration immediately. I can share a design proposal before making code changes.

> Modular Security Architecture: Phase 5
> --------------------------------------
>
>                 Key: FINERACT-1988
>                 URL: https://issues.apache.org/jira/browse/FINERACT-1988
>             Project: Apache Fineract
>          Issue Type: Sub-task
>            Reporter: Aleksandar Vidakovic
>            Priority: Major
>
> Add Open Policy Agent based authorization module.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)