[Pulp-dev] RBAC Status Thread

[Adrian Likins]

On Fri, Jun 5, 2020 at 8:23 PM Brian Bouterse <bmbouter at redhat.com> wrote:

>
> 1) django admin (the built in django UI) will be the mechanism
> administrators use to assign permissions to users and groups. This means
> the use of django admin with pulp is very likely (to me).
>
> Hopefully https://github.com/pulp/pulpcore/pull/705 will be useful here.


> 2) externally defined users and groups will need to be "replicated" to
> django's db at login time, probably using headers from the webserver This
> is consistent w/ the approach recommended here:
> https://www.adelton.com/django/external-authentication-for-django-projects
>

This is more or less what galaxy_ng ends up doing, at least for the
scenarios where it runs hosted with external SSO.
https://github.com/ansible/galaxy_ng/blob/master/galaxy_ng/app/auth/auth.py#L51
for
example.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-dev/attachments/20200609/6a554463/attachment.htm>