generated from TrueCloudLab/basic
engine: Add user and group targets #64
No reviewers
TrueCloudLab/storage-core-developers
TrueCloudLab/storage-services-developers
Labels
No labels
Infrastructure
blocked
bug
config
discussion
documentation
duplicate
enhancement
go
help wanted
internal
invalid
kludge
observability
perfomance
question
refactoring
wontfix
No milestone
No project
No assignees
4 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: TrueCloudLab/policy-engine#64
Loading…
Reference in a new issue
No description provided.
Delete branch "fyrchik/policy-engine:fix-user-chains"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Policies can be attached to a specific user. One way to handle this is to encode user in the rule condition. This is far from optimal, as it scales badly with the increase in the number of users.
Another option is to store user rules separately: the goal of this PR.
On a side-note, may be the best way to handle this is to make
RequestTarget
an interface which can return a list of targets in the order the are applied. With this, no changes would've been needed to support separate user/group rules.64c47aa1d0
to6bdab34caa
We should update
pkg/engine/inmemory
andpkg/morph/policy
packages to support new targets.6bdab34caa
to0cd259dd3f
@alexvanin fixed
0cd259dd3f
to6a495fccaa
6a495fccaa
to0e69e48511
WIP: engine: Add user and group targetsto engine: Add user and group targets