Epic: Foundations for Fine Grained Authorization
Open
@easyCZ is already working on this.
Since Jan 9, 2023.
feature: public-api
meta: never-stale
team: webapp
type: epic
- Dominant language
- TypeScript
- Stars
- 13.8k
- Forks
- 1.4k
- Avg merge
- 17h 58m
- Merged PRs (30d)
- 5
Description
Summary
This epic captures the work to improve the existing Gitpod Authorization and enable the capability to support fine grained authorization.
Context
Historically, the authorization model of gitpod is modelled around users and their team membership. In order to support Gitpod admins with finer-grained permissions, we also need to improve on our existing system.
Value
The Authorization Model is central to Gitpod operations. Without it, we cannot answer questions such as:
- Does user X, have the ability to list workspaces of all members in a team?
- Can user X setup billing for team T?
Tasks
Initial setup
- #15633
- #15634
- #15951
- #15952
- #16039
Populating SpiceDB
- #16102
- #16103
- #16239
- #16240
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.