Configuration - Automate dscp setting based on rules

[ryandurfey]

Most users don't understand dscp settings so asking them to fill in this field in a form is problematic. This setting should be applied automatically based on rules. Tenant users should not have ready access to change their dscp value. Admin or root tenant users should be able to override this value.

[ocket8888]

"... based on rules."

is a little vague. Here are my ideas:

This could be implemented by adding a property to Tenants that defines their DSCP, with null representing the ability to choose your own. Tenants cannot be allowed to have permissions to edit their own DSCP, so we have as I see it two options for the permission to edit DSCP.

• The parent of a Tenant can edit its DSCP value. As a special case, the root tenant (being its own parent) can edit its own DSCP. The problem with this is that it forces you to use a "flat" Tenant structure. For example, if I offer tenancy to company A which has divisions B and C, then I might make a Tenant structure like root -> A -> (B & C), however this means that users in A can change their company's DSCP values for B and C, so I'm forced to either remember to never put a user in A, or do something like root -> (A_B & A_C) which defeats the purpose of the nestable tenants in the first place.
• Under the User Permissions described by User Permissions Blueprint #5848 a new Permission could be added when editing Tenants (e.g. "tenant-dscp-change") that would allow changing a DSCP. The problem with this is it conflates Tenancy with user-based Permissions, which could make it hard to keep the concepts straight.