MIME-Version: 1.0
From: Aditya Toshniwal <aditya.toshniwal@enterprisedb.com>
Date: Thu, 13 Mar 2025 11:46:08 +0530
Message-ID: 
 <CAM9w-_n9sUD1i_qzfowp5=CS0voUnmcGX-UeK8pZ5k3+xuHtLQ@mail.gmail.com>
Subject: Role based access control discussion
To: pgadmin-hackers <pgadmin-hackers@postgresql.org>
Content-Type: multipart/alternative; boundary="00000000000011ac8a063033447d"
Archived-At: 
 <https://www.postgresql.org/message-id/CAM9w-_n9sUD1i_qzfowp5%3DCS0voUnmcGX-UeK8pZ5k3%2BxuHtLQ%40mail.gmail.com>
Precedence: bulk

--00000000000011ac8a063033447d
Content-Type: text/plain; charset="UTF-8"

Hi Hackers,

I have started looking into a feature where users have requested for custom
roles. The roles can then be assigned permissions. Here's what I think how
it can be done:

   1. Create a framework for roles based access control.
   2. Allow adding/editing/deleting roles from UI.
   3. User management dialog can be converted to a tab to get extra space
   for other stuff.
   4. pgAdmin can have some predefined permissions. The permissions can
   then be used to validate at the API levels and UI.
   5. New permissions cannot be added from UI as it will require code
   changes. They can be added based on user requests.
   6. Admin can allow these permissions to the roles and roles can be
   assigned to users.
   7. Permissions will be used to
   8. Admin role remains static with no changes allowed.

Let me know your thoughts on this. If everything looks good then I will
proceed.

-- 
Thanks,
Aditya Toshniwal
pgAdmin Hacker | Sr. Staff SDE II | *enterprisedb.com*
<https://www.enterprisedb.com/>
"Don't Complain about Heat, Plant a TREE"

--00000000000011ac8a063033447d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div class=3D"gmail_default" style=3D"font-family:ver=
dana,sans-serif">Hi Hackers,</div><div class=3D"gmail_default" style=3D"fon=
t-family:verdana,sans-serif"><br></div><div class=3D"gmail_default" style=
=3D"font-family:verdana,sans-serif">I have started looking into a feature w=
here users have requested for custom roles. The roles can then be assigned =
permissions. Here&#39;s what I think how it can be done:</div><div class=3D=
"gmail_default" style=3D"font-family:verdana,sans-serif"><ol><li>Create a f=
ramework for roles based access control.</li><li>Allow adding/editing/delet=
ing roles from UI.</li><li>User management dialog can be converted to a tab=
 to get extra space for other stuff.</li><li>pgAdmin can have some predefin=
ed permissions. The permissions can then be used to validate at the API lev=
els and UI.</li><li>New permissions cannot be added from UI as it will requ=
ire code changes. They can be added based on user requests.</li><li>Admin c=
an allow these permissions to the roles and roles can be assigned to users.=
</li><li>Permissions will be used to=C2=A0</li><li>Admin role remains stati=
c with no changes allowed.</li></ol><div>Let me know your thoughts on this.=
 If everything looks good then I will proceed.</div></div></div><div><br></=
div><span class=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" c=
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr=
"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div>=
<font size=3D"2" color=3D"#000000" face=3D"arial, sans-serif">Thanks,</font=
><div><span style=3D"color:rgb(34,34,34)"><span style=3D"color:rgb(18,22,70=
)"><font face=3D"arial, sans-serif">Aditya Toshniwal</font></span></span><f=
ont size=3D"2" color=3D"#000000" face=3D"verdana, sans-serif"><br></font></=
div><div><span style=3D"color:rgb(18,22,70);font-family:Arial,sans-serif">p=
gAdmin Hacker</span><font size=3D"2" color=3D"#000000" style=3D"font-family=
:verdana,sans-serif">=C2=A0| </font><font size=3D"2" color=3D"#000000" face=
=3D"arial, sans-serif">Sr. Staff SDE II</font><font size=3D"2"><font face=
=3D"verdana, sans-serif"><font color=3D"#000000">=C2=A0|</font><span style=
=3D"background-color:rgb(255,255,255)"><font color=3D"#0c343d"> </font></sp=
an></font><a href=3D"https://www.enterprisedb.com/" target=3D"_blank"><font=
 face=3D"arial, sans-serif" color=3D"#0c343d"><b style=3D"background-color:=
rgb(255,255,255)">enterprisedb.com</b></font></a></font></div><div><font co=
lor=3D"#38761d" size=3D"1"><font face=3D"arial, sans-serif">&quot;Don&#39;t=
 Complain about Heat, Plant a TREE&quot;</font></font></div></div></div></d=
iv></div></div></div></div></div>

--00000000000011ac8a063033447d--