Document user roles concept/feature

[pmaier1]

Where

• Overview as a basic framework https://doc.owncloud.com/ocis/next/architecture/architecture.html
• Admin Guide https://doc.owncloud.com/ocis/next/configuration

What

Basic idea / framework

• Enable a differentiation between users based on roles
  a) Segregation of duties in administration
  b) Different types of users (guest, project manager, regular employee, etc.)
• Roles are a composition of different permissions in the system
• The system enables an organization to define their own user roles just as desired

Example

Admin doc

• Which default roles are available?
• How are the default roles composed? Which permissions do they carry?
• Which permissions are available in the system?
• How can I change role composition?
• How can I assign roles to users?
• How does the system work with external LDAP/IdP?
• tbd

[pmaier1]

@mmattel

[mmattel]

No worry havent forgotten this, needed to prioritize. Already in contact with rhafer.

[mmattel]

For the current implementation see: https://github.com/owncloud/ocis/blob/master/services/settings/pkg/store/defaults/defaults.go#L10

[pmaier1]

Feedback on the current state (https://doc.staging.owncloud.com/ocis/next/deployment/general/roles-permissions.html)

• Please introduce the feature and what it's good for
  • Segregation of duties in administration
  • Differentiation of user types (regular user, guest, project lead, etc.)
• Please explain all the permissions behind the roles (e.g., what does the permission "Create Space" allow a user to do)
• Please focus on permissions, less on the roles. The roles are just defaults/examples and will be customizable later on.
• Please don't compare with oC 10
• Please rename the "Space roles" to "Sharing roles". The only difference between regular sharing and Spaces is the Manager role which only applies to Spaces.
• Please move the "Sharing roles" somewhere else. They are for sharing. The roles and permissions system is for user management.
• Please remove all references to differences between Web and API
• Please explain how to assign roles to users