#2041 RFE: fine grained authz per application
Closed: Fixed None Opened 8 years ago by vakwetu.

Barbican users should be able to access Barbican secrets only. IPA users should be able to
access IPA secrets only. etc..

Design page: https://pagure.io/test_dogtag_designs/pull-request/5


Initial set of patches merged.

Total 304 (delta 178), reused 0 (delta 0)
To ssh://vakwetu@git.fedorahosted.org/git/pki.git
b24ea9e..9dc5a78 master -> master

See wiki for details on how to use:
http://pki.fedoraproject.org/wiki/Kra_authz_realm

Whats left:

  1. mechanism to specify realm when archiving through the CA Connector
  2. VLV fixes

The CA-KRA connector bits have been checked in:

[alee@aleeredhat pki]$ git push origin master
Counting objects: 111, done.
Delta compression using up to 8 threads.
Compressing objects: 100% (82/82), done.
Writing objects: 100% (111/111), 18.35 KiB | 0 bytes/s, done.
Total 111 (delta 64), reused 41 (delta 9)
To ssh://vakwetu@git.fedorahosted.org/git/pki.git
fe1f36d..4f7b36b master -> master

The VLV piece has been spawned off into another ticket.

Metadata Update from @vakwetu:
- Issue assigned to vakwetu
- Issue set to the milestone: 10.3.1

7 years ago

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/2329

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Login to comment on this ticket.

Metadata