|
|
| Line 1: |
Line 1: |
| − | = Dynamic Policies =
| |
| − | <big><big><big>''Improving policies''</big></big></big>
| |
| | | | |
| − |
| |
| − | == Weekly Meetings ==
| |
| − |
| |
| − | == Roadmap ==
| |
| − |
| |
| − | Out-of-band policy management
| |
| − | ---------------------------------------------
| |
| − |
| |
| − | Goal: Policies managed via API
| |
| − | Initial source of truth is uploaded from the projects to the policy management server
| |
| − | Policy updates in the policy management server may occur at any time thorugh the API
| |
| − | The latest policy for a given endpoint is fetched/cached by middleware
| |
| − | Middleware stores it in the directory the service is expecting to find it when doing enforcement
| |
| − |
| |
| − |
| |
| − | Better delegation
| |
| − | ---------------------------
| |
| − |
| |
| − | Goal: Improve roles and assignments
| |
| − | Roles would be grouped in sets and possibly defined by domain
| |
| − | As consequence, better default policies will be provided, fixing the bug #968696 (admin anywhere is admin everywhere)
| |
