Project

General

Profile

Actions

Feature #139

open

Epic #49: Implement user, groups and permissions management

How are permissions defined in the system?

Feature #139: How are permissions defined in the system?

Added by Bricklou 12 days ago. Updated 12 days ago.

Status:
Draft
Priority:
Normal
Assigned To:
-
Start date:
03/28/2026
Due date:
% Done:

0%

Estimated time:

Description

Open question: What is the permission model?

  • Is it a flat list of granular permissions (e.g., 'user.create', 'user.delete', 'report.view')?
  • Are they hierarchical/scoped (e.g., by resource type, module)?
  • Who can define new permissions—admins or developers only?
  • Are they hardcoded or database-driven?
  • What's the permission model—RBAC (role-based), ABAC (attribute-based), ACL-based?

This affects the implementation of features #127, #52, #54, #59, #60

Actions

Also available in: PDF Atom