4 RBAC Notes
amigan edited this page 2025-01-15 21:32:00 -05:00

Auth Refactor

  • Entities (incident, call, talkgroup record, alert)
    • Read, write (permissions)
    • Owner, other users, public (roles)
    • Role permission assignments configurable in webui
    • ACLs per individual entity with inheritance from default configurable global ACL
    • Store ACLs as many many table in DB
  • Access/refresh token architecture
  • Share links with their own ACLs
  • Design with individual alert architecture in mind
  • Share links grant a SharedWith role
  • Share perms can either be anyone with the URL or certain users