Swift/ideas/acl-domains
< Swift | ideas
Revision as of 12:49, 22 November 2018 by Marco.passerini (talk | contribs) (Created page with "== Problem == Swift ACLs usually apply to username:project tuples. If we use domains, it's possible that there are two or more usernames which are equal on different domains,...")
Problem
Swift ACLs usually apply to username:project tuples. If we use domains, it's possible that there are two or more usernames which are equal on different domains, to identify different people. For this reason, in order to avoid security problems, it's recommended to use user ids instead of usernames. This is not very user friendly.
Proposed solution
Add the possiblity of specifying user and project domains in ACLs, in order to allow again the creation of ACLs with human-readable usernames.
Contact: mpasserini on IRC