Project

General

Profile

Actions
Copy link

Feature #3486

open

expose origin of permission in perm dict for users

Added by Marcin Kuzminski [CTO] over 8 years ago. Updated over 8 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
14.04.2016
Due date:
% Done:

0%

Estimated time:
Sorting:
Commit Number:

Description

Currently when we build permissions tree there are multiple origins of permissions. It would be usefull to know from where the user got a repository.read permission. During the big calculation we should store the origin of permissions into a separate dict so we can display it in permissions summary page.

example origin types:

  • explicit permissions on repo
  • permission inherited from user group
  • permissions inherited from default repo permissions
  • permissions inherited from global default permission.

This would allow to check if some users don't have wrong user rights, by checking the origin.

Example: it's ok if user has read that it's coming from explicit assignment (one can go to that repo and change it), but it would be wrong if that read permissions comes from inherited global one. It would simply allow to detect nicer exception and improve security

Files

pasted_image_at_2016_06_03_09_51_pm.png (200 KB) pasted_image_at_2016_06_03_09_51_pm.png Marcin Kuzminski [CTO], 03.06.2016 21:03
Actions
Copy link

Also available in: Atom PDF