lablup / lablup/backend.ai

Add vfolder-data RBAC element type for vfolder data access control

Open
#10,431 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
670
Forks
183
Avg merge
15h 13m
Merged PRs (30d)
368

Description

== Motivation ==

Admins should be able to access vfolder listings and detail panels, but must not be able to access the data (files/directories) inside the vfolder. The current RBAC element type cannot separate vfolder metadata access from internal data access.

== Objective ==

Add a vfolder-data value to the RBAC element type, so that access to vfolder internal data can be managed separately from vfolder metadata access.

== Expected Sub Issues ==

1. Add vfolder-data to RBAC element type enum

2. Apply RBAC creator pattern for vfolder-data

3. Data migration for vfolder-data RBAC element type

JIRA Issue: BA-5377

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.