-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Open
Labels
feature: public-apiIssues relating to Public APIIssues relating to Public APImeta: never-staleThis issue can never become staleThis issue can never become staleteam: webappIssue belongs to the WebApp teamIssue belongs to the WebApp teamtype: epic
Description
Summary
This epic captures the work to improve the existing Gitpod Authorization and enable the capability to support fine grained authorization.
Context
Historically, the authorization model of gitpod is modelled around users and their team membership. In order to support Gitpod admins with finer-grained permissions, we also need to improve on our existing system.
Value
The Authorization Model is central to Gitpod operations. Without it, we cannot answer questions such as:
- Does user X, have the ability to list workspaces of all members in a team?
- Can user X setup billing for team T?
Tasks
Initial setup
- To pick up a draggable item, press the space bar. While dragging, use the arrow keys to move the item. Press space again to drop the item in its new position, or press escape to cancel.
Populating SpiceDB
- To pick up a draggable item, press the space bar. While dragging, use the arrow keys to move the item. Press space again to drop the item in its new position, or press escape to cancel.
Siddhant-K-code, loujaybee and hman-pro
Metadata
Metadata
Assignees
Labels
feature: public-apiIssues relating to Public APIIssues relating to Public APImeta: never-staleThis issue can never become staleThis issue can never become staleteam: webappIssue belongs to the WebApp teamIssue belongs to the WebApp teamtype: epic
Type
Projects
Status
No status
Milestone
Relationships
Development
Select code repository
Activity
[-]Epic: Fine Grained Authorization[/-][+]Epic: Foundations for Fine Grained Authorization[/+]stale commentedon May 22, 2023
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.