dashboard support authority management

[WangXiangUSTC]

Feature Request

Is your feature request related to a problem? Please describe:

Chaos can be created and deleted by anyone who has access to the dashboard, and the authority of dashboard is very high, it means the Dashboard is a big security hazard.

Describe the feature you'd like:

The dashboard should support authority management, login by service account and token created by k8s. And the user can only do the chaos limited by the role bind with the service account.

[torblerone]

Is there already a rough date for the feature? I would like to use Chaos Mesh in the company I work for, but access control is a critical feature for cross-team use and distribution of authorizations, e.g. for defining experiments on certain namespaces for specific users.

The granularity of the authorizations could optimally be mapped to the various activities that can be used with Chaos Mesh, especially in connection with Kubernetes (see also k8s Best Practices for RBAC with admin / edit / view).

[WangXiangUSTC]

You can look the proposal for details https://github.com/chaos-mesh/rfcs/blob/main/text/2020-10-22-authn-and-authz-on-chaos-dashboard. We plan to implement this feature next month.

[WangXiangUSTC]

You can comment in this issue if have any question @torblerone

[torblerone]

Many Thanks @WangXiangUSTC ! It is nice to see that you are thinking and developing in this direction too. As I said before, it would be great if you could distribute role permissions in a very fine-grained manner. I'm thinking of permissions for certain types of chaos, namespaces, maybe even services. But that shouldn't downplay your state of affairs, you have orientated yourself very well to CN when it comes to a role concept! Thanks for that!

[WangXiangUSTC]

The permissions depend on what can do with the service account, the dashboard will not manage the authority.
This feature is in developing, you can see #1112. @torblerone

[WangXiangUSTC]

solve this issue via #1188