awx/docs/rbac.md
Alan Rominger 817c3b36b9 Replace role system with permissions-based DB roles
Develop ability to list permissions for existing roles

Create a model registry for RBAC-tracked models

Write the data migration logic for creating
  the preloaded role definitions

Write migration to migrate old Role into ObjectRole model

This loops over the old Role model, knowing it is unique
  on object and role_field

Most of the logic is concerned with identifying the
  needed permissions, and then corresponding role definition

As needed, object roles are created and users then teams
  are assigned

Write re-computation of cache logic for teams
  and then for object role permissions

Migrate new RBAC internals to ansible_base

Migrate tests to ansible_base

Implement solution for visible_roles

Expose URLs for DAB RBAC
2024-04-11 14:59:09 -04:00

350 B

Role-Based Access Control (RBAC)

The Role-Based Access Control system has been moved to the django-ansible-base library.

https://github.com/ansible/django-ansible-base

Overview

RBAC - System Basics

Illustrations from the old RBAC system, before the move to django-ansible-base.

Example RBAC hierarchy