Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

What should be the method of ‘creating a custom Policy/Role’?
As seen above, creating a custom policy and attaching it to the group/account involves multiple API calls. Also user has to add a permission entry for every single API that should be allowed.
So if user wants to allow alla ctions, there will be 300 'createAclPermission' calls involved.

Which method should we pick? Pending decision.

  • Should we add a UI piece to ease this operation? Should UI be CCP only?
  • Should we facilitate this using a config file and a policy language definition? The user can upload the file and CS should read the input and generate the policy objects?
  • Should we let the user make multiple API calls for phase 1?