Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Treat users and groups as distinct concepts #489

Merged
merged 4 commits into from
Feb 20, 2014

Conversation

macintux
Copy link
Contributor

To make it easier to reason about and document the new security behavior, this PR splits roles into users and groups.

  • Users (but not groups) can be given authentication information (sources).
  • Groups (but not users) can be used to cascade privileges to other groups and users.

Where the code does not or cannot distinguish between users and groups, I continue to refer to roles, but the user interface is constrained to users and groups.

There are 3 projects impacted by this change, all with the same branch name (jrd-security-role-bifurcation):

  • riak
  • riak_core
  • riak_test

All should be merged at the same time. I will be filing PRs for each.

/cc @Vagabond

@Vagabond
Copy link
Contributor

+1

macintux added a commit that referenced this pull request Feb 20, 2014
Treat users and groups as distinct concepts
@macintux macintux merged commit 90f3f06 into develop Feb 20, 2014
@macintux macintux deleted the jrd-security-role-bifurcation branch February 20, 2014 20:36
@jaredmorrow
Copy link
Contributor

Is there a complementary one for basho/riak_ee?

@Vagabond
Copy link
Contributor

Oh, we should probably do that (or just copy the damn riak-admin script over).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants