Actions
Feature #139
openEpic #49: Implement user, groups and permissions management
How are permissions defined in the system?
Feature #139:
How are permissions defined in the system?
Status:
Draft
Priority:
Normal
Assigned To:
-
Start date:
03/28/2026
Due date:
% Done:
0%
Estimated time:
Description
Open question: What is the permission model?
- Is it a flat list of granular permissions (e.g., 'user.create', 'user.delete', 'report.view')?
- Are they hierarchical/scoped (e.g., by resource type, module)?
- Who can define new permissions—admins or developers only?
- Are they hardcoded or database-driven?
- What's the permission model—RBAC (role-based), ABAC (attribute-based), ACL-based?
This affects the implementation of features #127, #52, #54, #59, #60
Actions