Option to exclude native groups to share with for security perspective
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
Certain application or configuration options require the use of groups.
Think of enabling certain apps for a specific group of the option to restrict autocomplete with sharing for only users in a specific group.
When you make use of these options, it can only result in large groups.
When someone accidentally shares data with such a group then, it can have data impact in addition to large system impact.
Describe the solution you'd like
Possibility to explicitly exclude certain system groups from sharing with is then convenient.
Option to define a list of groups, which you use for system configuration options and not for sharing purposes.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review how system groups are used by application or configuration options and by sharing, then identify the relevant entry points for enforcing an exclusion list. Done means maintainers can define groups reserved for system configuration and those groups cannot be selected for sharing.
Written by the indexing model from the issue text.
Assessment
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100