Skip to content

Comments

WIP: file-based rights: overhaul#1993

Open
marschap wants to merge 2 commits intoKozea:masterfrom
marschap:WIP-fix-rights-from-file
Open

WIP: file-based rights: overhaul#1993
marschap wants to merge 2 commits intoKozea:masterfrom
marschap:WIP-fix-rights-from-file

Conversation

@marschap
Copy link
Contributor

This is work in progress: undocumented and untested in context - please feel free to comment., but do not merge yet

  • treat the 'groups' config key similar to the 'user' config key
    • BREAKING CHANGE: make 'group' a pattern instead of a list
      • same "format" as the 'user' and 'collection' keys
      • allow for easy expression of "any": .+
    • allow giving "{group}" in the 'collection' pattern to allow for resticting to the goups a use is member of
  • fix the rule matching logic
    • if both keys, 'user' and 'groups', are given, both need to match, and both can be used in the 'collection' pattern
    • if only one is given, only the given one needs to match, and only the given one can be used in the 'collection' pattern
    • if none is given, the rule will always fail

* treat the 'groups' config key similar to the 'user' config key
  - BREAKING CHANGE: make 'group' a pattern instead of a list
    - same "format" as the 'user' and 'collection' keys
    - allow for easy expression of "any": .+
  - allow giving "{group}" in the 'collection' pattern
* fix the rule matching logic
  - if both keys, 'user' and 'groups', are given,
    both need to match, and both can be used in the 'collection' pattern
  - if only one is given, only the given one needs to match,
    and only the given one can be used in the 'collection' pattern
  - if none is given, the rule will always fail
@pbiering pbiering added this to the 3.7.0 milestone Feb 23, 2026
@pbiering pbiering added auth DRAFT PR in DRAFT status labels Feb 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auth DRAFT PR in DRAFT status

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants