Skip to content

Conversation

@doobry-systemli
Copy link
Contributor

This is work in progress.

Add basic API configuration and permission management

* Limit all operations for resources Domain, ReservedName and Voucher to
  `ROLE_ADMIN`.
* Limit operations for resource OpenPgpKey to `ROLE_ADMIN` or owner.
* Limit operations for recources Alias and User to `ROLE_ADMIN`,
  `ROLE_DOMAIN_ADMIN` or owner.

TODO:

* Permissions for domain `ROLE_DOMAIN_ADMIN`:
  * [ ] Allow to create Alias and User for own domain.
* Permissions for `ROLE_USER`:
  * [ ] Allow to create,update+delete up to three Alias for own User.
  * [ ] Allow to create+delete infinitive random Alias.
  * [ ] Allow to change password,2fa,recovery_token for own User.
  * [ ] Allow to create and update OpenPgpKey for own User.
* Permissions for `ROLE_MULIPLIER`:
  * [ ] Allow to create infinitive Voucher
* Limited permissions for `ROLE_SPAM` and `ROLE_SUSPICIOUS`
* Lots of integration tests
@doobry-systemli doobry-systemli added the enhancement New feature or request label Jan 12, 2024
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions

0.0% Coverage on New Code (required ≥ 80%)

See analysis details on SonarCloud

@doobry-systemli
Copy link
Contributor Author

Superseeded by #592

@0x46616c6b 0x46616c6b deleted the enh/admin_api branch August 29, 2025 22:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants