MIME-Version: 1.0
References: 
 <CAM9w-_n9sUD1i_qzfowp5=CS0voUnmcGX-UeK8pZ5k3+xuHtLQ@mail.gmail.com>
In-Reply-To: 
 <CAM9w-_n9sUD1i_qzfowp5=CS0voUnmcGX-UeK8pZ5k3+xuHtLQ@mail.gmail.com>
From: Dave Page <dpage@pgadmin.org>
Date: Thu, 13 Mar 2025 10:06:06 +0000
Message-ID: 
 <CA+OCxowN3uKQLWTf6F1j7_Zo_72CVj+jue4XjOdnRp3LHxH7Qw@mail.gmail.com>
Subject: Re: Role based access control discussion
To: Aditya Toshniwal <aditya.toshniwal@enterprisedb.com>
Cc: pgadmin-hackers <pgadmin-hackers@postgresql.org>
Content-Type: multipart/alternative; boundary="0000000000000f040806303679b8"
Archived-At: 
 <https://www.postgresql.org/message-id/CA%2BOCxowN3uKQLWTf6F1j7_Zo_72CVj%2Bjue4XjOdnRp3LHxH7Qw%40mail.gmail.com>
Precedence: bulk

--0000000000000f040806303679b8
Content-Type: text/plain; charset="UTF-8"

Hi

On Thu, 13 Mar 2025 at 06:16, Aditya Toshniwal <
aditya.toshniwal@enterprisedb.com> wrote:

> Hi Hackers,
>
> I have started looking into a feature where users have requested for
> custom roles. The roles can then be assigned permissions. Here's what I
> think how it can be done:
>
>    1. Create a framework for roles based access control.
>    2. Allow adding/editing/deleting roles from UI.
>    3. User management dialog can be converted to a tab to get extra space
>    for other stuff.
>    4. pgAdmin can have some predefined permissions. The permissions can
>    then be used to validate at the API levels and UI.
>    5. New permissions cannot be added from UI as it will require code
>    changes. They can be added based on user requests.
>    6. Admin can allow these permissions to the roles and roles can be
>    assigned to users.
>    7. Permissions will be used to
>    8. Admin role remains static with no changes allowed.
>
> Let me know your thoughts on this. If everything looks good then I will
> proceed.
>

What permissions would we support initially?

-- 
Dave Page
pgAdmin: https://www.pgadmin.org
PostgreSQL: https://www.postgresql.org
pgEdge: https://www.pgedge.com

--0000000000000f040806303679b8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">Hi</div><br><div class=3D"gmail_quote gma=
il_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, 13 Mar 20=
25 at 06:16, Aditya Toshniwal &lt;<a href=3D"mailto:aditya.toshniwal@enterp=
risedb.com">aditya.toshniwal@enterprisedb.com</a>&gt; wrote:<br></div><bloc=
kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-=
width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);paddin=
g-left:1ex"><div dir=3D"ltr"><div><div style=3D"font-family:verdana,sans-se=
rif">Hi Hackers,</div><div style=3D"font-family:verdana,sans-serif"><br></d=
iv><div style=3D"font-family:verdana,sans-serif">I have started looking int=
o a feature where users have requested for custom roles. The roles can then=
 be assigned permissions. Here&#39;s what I think how it can be done:</div>=
<div style=3D"font-family:verdana,sans-serif"><ol><li>Create a framework fo=
r roles based access control.</li><li>Allow adding/editing/deleting roles f=
rom UI.</li><li>User management dialog can be converted to a tab to get ext=
ra space for other stuff.</li><li>pgAdmin can have some predefined permissi=
ons. The permissions can then be used to validate at the API levels and UI.=
</li><li>New permissions cannot be added from UI as it will require code ch=
anges. They can be added based on user requests.</li><li>Admin can allow th=
ese permissions to the roles and roles can be assigned to users.</li><li>Pe=
rmissions will be used to=C2=A0</li><li>Admin role remains static with no c=
hanges allowed.</li></ol><div>Let me know your thoughts on this. If everyth=
ing looks good then I will proceed.</div></div></div></div></blockquote><di=
v><br></div><div>What=C2=A0permissions would we support initially?</div><di=
v>=C2=A0</div></div><span class=3D"gmail_signature_prefix">-- </span><br><d=
iv dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr">Dave Page<div>pgA=
dmin: <a href=3D"https://www.pgadmin.org" target=3D"_blank">https://www.pga=
dmin.org</a></div><div>PostgreSQL: <a href=3D"https://www.postgresql.org" t=
arget=3D"_blank">https://www.postgresql.org</a></div><div>pgEdge: <a href=
=3D"https://www.pgedge.com" target=3D"_blank">https://www.pgedge.com</a><br=
><div></div><div><br></div></div></div></div></div>

--0000000000000f040806303679b8--