Skip to content

Migrate Existing Core Roles and Permissions to Declarative YAML #411

Closed

Description

@BryanttV

Description

This task focuses exclusively on translating the existing, built-in Open edX roles and permissions into the new declarative YAML schema for openedx-authz. This step guarantees that the baseline system configuration is accurately modeled in the new format before introducing the Casbin enforcement engine or dynamic REST APIs.

Acceptance Criteria

  • Audit Existing Definitions: Identify and document all default roles, permissions, and groupings currently hardcoded or established in the core system.
  • YAML Translation: Create the corresponding YAML definition files mapping the audited rules directly into the new openedx-authz schema.
  • Metadata Preservation: Ensure all contextual data (like display_name, description, and resource targets) is thoroughly captured in the YAML structure so it isn't lost during the migration.
  • Schema Compliance: Validate that the newly created YAML files strictly adhere to the expected format and can be successfully parsed by the Loader (implemented in Issue Core Loader, Compilation, and Definition Validation #410).

Concrete Deliverable

A completed set of YAML files committed to the core module that fully represents the current, legacy authorization state, serving as the static source of truth for the new system.

Activity

  1. changed the title [-]Definition translation[/-] [+]3. Definition translation[/+] on Aug 21, 2026
  2. changed the title [-]3. Definition translation[/-] [+]Definition translation[/+] on Sep 2, 2026
  3. changed the title [-]Definition translation[/-] [+]Migrate Existing Core Roles and Permissions to Declarative YAML[/+] on Sep 2, 2026
  4. rodmgwgu commented on Sep 21, 2026

    @rodmgwgu
    Contributor

    @BryanttV @mariajgrimaldi Would the yaml definitions I created here (#445) close this issue?

  5. mariajgrimaldi commented on Sep 22, 2026

    @mariajgrimaldi
    Member

    Yes, I do think so! If we're missing any definitions we could include them retroactively.

    Thanks so much :)

  6. linked a pull request that will close this issuefeat: add authz schema definition files #445on Oct 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

willowReleased in Willow

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions