Objective AU-2: Implement the centralized authorization framework necessary for VEDA apps to make app-specific decisions in enabling users and accessing resources

[eroma2014]

Motivation

This is the next phase in VEDA Auth Central. For VEDA, we want to make app-specific decisions about who can access what and how to enable it across VEDA Apps. VEDA Auth Central to enable Groups, Attributes, and Roles to hold the relevant information so the apps can make decisions. These components play a crucial role in allowing apps to make informed decisions about user permissions and resource access.

Team & Owner(s)*

Lahiru*, Eroma, Brian

Success Criteria

• VEDA app authorization requirements are identified and documented.
• The VEDA authorization needs are designed and implemented.
• Ability to implement app-level authorization decisions based on user role, group and attributes.
  • Use cases on the VEDA dashboard and STAC are implemented and ready for demo.

Tasks

Preview Give feedback

1. Document and review the identified requirements.
2. Implement the identified authorization features into VEDA auth.
3. Identify Grafana app authorization requirements
4. Identify STACC app authorization requirements
5. Implement the required additional features based on the meeting with app teams

Stretch goals:

Risks/Dependencies

• A successful demo depends on VEDA app integration with Auth Central. This would need a cross-functional team effort.

[lahirujayathilake]

Grafana authorization requirements - #65 (comment)

[eroma2014]

The identified: Groups & Scopes for VEDA Applications

[eroma2014]

The planned AU objective is on pause due the ADR review process. The VEDA teams are in discussion.
ADR documentation

1. Adding a Custom Layer on Top of Keycloak for Veda Auth Central
2. Authentication in VEDA Auth Central
3. Authorization in VEDA Auth Central
4. Application-Specific Administration in Veda Auth Central
5. A Customs User Portal for VEDA Auth Central

ADR discussion

1. Brainstorm Auth Central vs Keycloak ADR #85
2. Review and refine ADR about Keycloak middleware #87

[eroma2014]

Closing this Objective as all tasks are completed.