Skip to content

[wip] Permissions API changes #885

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Benjamin Rewis (benjirewis) wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[wip] Permissions API changes #885

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions proto/viam/app/v1/robot.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -188,6 +188,27 @@ message AuthConfig {
repeated AuthHandlerConfig handlers = 1;
repeated string tls_auth_entities = 2;
optional ExternalAuthConfig external_auth_config = 3;
repeated Role roles = 4;
}

// A Role describes the permissions an authenticated user has on this
// machine. A user with no associated Role is unrestricted.
message Role {
// user is the ID of the user this role applies to: an API key ID or a
// FusionAuth UUID.
string user = 1;
repeated Permission permissions = 2;
}

// A Permission grants a user the ability to invoke a set of methods on
// resources with a given name.
message Permission {
// resource is the name of the resource this permission applies to.
string resource = 1;
// methods is a list of fully qualified gRPC methods the user may invoke
// on resources of this name, e.g.
// "/viam.component.camera.v1.CameraService/GetImages".
repeated string methods = 2;
}

message JWKSFile {
Expand Down
Loading