From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <richard.purdie@linuxfoundation.org>
Received: by yocto-www.yoctoproject.org (Postfix, from userid 118)
	id A61A4E0082F; Wed, 29 Oct 2014 06:11:56 -0700 (PDT)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	yocto-www.yoctoproject.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
	version=3.3.1
X-Spam-HAM-Report: * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
	*      [score: 0.0000]
Received: from dan.rpsys.net (5751f4a1.skybroadband.com [87.81.244.161])
	by yocto-www.yoctoproject.org (Postfix) with ESMTP id 08AECE007C0
	for <toaster@yoctoproject.org>; Wed, 29 Oct 2014 06:11:46 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by dan.rpsys.net (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id
	s9TDAg8n019954; Wed, 29 Oct 2014 13:11:04 GMT
Received: from dan.rpsys.net ([127.0.0.1])
	by localhost (dan.rpsys.net [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id fOr_ASnanMc8; Wed, 29 Oct 2014 13:11:04 +0000 (GMT)
Received: from [192.168.3.10] ([192.168.3.10]) (authenticated bits=0)
	by dan.rpsys.net (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id
	s9TDB13s019967
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT);
	Wed, 29 Oct 2014 13:11:02 GMT
Message-ID: <1414588296.7967.189.camel@ted>
From: Richard Purdie <richard.purdie@linuxfoundation.org>
To: "Barros Pena, Belen" <belen.barros.pena@intel.com>
Date: Wed, 29 Oct 2014 13:11:36 +0000
In-Reply-To: <D07686B3.4CE33%belen.barros.pena@intel.com>
References: <D07030E2.4C9AD%belen.barros.pena@intel.com>
	<802B8E31E3519842A6CEE1B497E861B164F92C@IRSMSX108.ger.corp.intel.com>
	<D07686B3.4CE33%belen.barros.pena@intel.com>
X-Mailer: Evolution 3.10.4-0ubuntu2 
Mime-Version: 1.0
Cc: "toaster@yoctoproject.org" <toaster@yoctoproject.org>
Subject: Re: [RFC] Toaster access control
X-BeenThere: toaster@yoctoproject.org
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: Web based interface for BitBake <toaster.yoctoproject.org>
List-Unsubscribe: <https://lists.yoctoproject.org/options/toaster>,
	<mailto:toaster-request@yoctoproject.org?subject=unsubscribe>
List-Archive: <http://lists.yoctoproject.org/pipermail/toaster>
List-Post: <mailto:toaster@yoctoproject.org>
List-Help: <mailto:toaster-request@yoctoproject.org?subject=help>
List-Subscribe: <https://lists.yoctoproject.org/listinfo/toaster>,
	<mailto:toaster-request@yoctoproject.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Oct 2014 13:11:56 -0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit

On Wed, 2014-10-29 at 12:16 +0000, Barros Pena, Belen wrote:
> Well spotted: my email made no mention to the permissions system. I think
> the plan is to put in place very simple permissions initially, mainly to
> make sure we hit our 1.8 target. The permissions you can grant a user will
> be something like:
> 
> * Access to a project, which is binary (i.e. If you have access, you can
> see the configuration and the build information, you can download
> artifacts, you can change the configuration and you can start builds)

I'd propose one change here, splitting this into two. "read" and "write"
access. "read" covered most things except changing configuration and
starting builds.

Cheers,

Richard