You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Migrate Existing Core Roles and Permissions to Declarative YAML #411
This task focuses exclusively on translating the existing, built-in Open edX roles and permissions into the new declarative YAML schema for openedx-authz. This step guarantees that the baseline system configuration is accurately modeled in the new format before introducing the Casbin enforcement engine or dynamic REST APIs.
Acceptance Criteria
Audit Existing Definitions: Identify and document all default roles, permissions, and groupings currently hardcoded or established in the core system.
YAML Translation: Create the corresponding YAML definition files mapping the audited rules directly into the new openedx-authz schema.
Metadata Preservation: Ensure all contextual data (like display_name, description, and resource targets) is thoroughly captured in the YAML structure so it isn't lost during the migration.
Schema Compliance: Validate that the newly created YAML files strictly adhere to the expected format and can be successfully parsed by the Loader (implemented in Issue Core Loader, Compilation, and Definition Validation #410).
Concrete Deliverable
A completed set of YAML files committed to the core module that fully represents the current, legacy authorization state, serving as the static source of truth for the new system.
Activity
[-]Definition translation[/-][+]3. Definition translation[/+][-]3. Definition translation[/-][+]Definition translation[/+][-]Definition translation[/-][+]Migrate Existing Core Roles and Permissions to Declarative YAML[/+]rodmgwgu commentedon Sep 21, 2026
@BryanttV @mariajgrimaldi Would the yaml definitions I created here (#445) close this issue?
mariajgrimaldi commentedon Sep 22, 2026
Yes, I do think so! If we're missing any definitions we could include them retroactively.
Thanks so much :)