Granular role/content based access (URGENT)

[youcefguichi]

first of all, Thank you for your great work and the effort!

So, i have setup oauth with entra id for apicurio. i can manage the permissions using the 3 provided roles sr-admin sr-developer sr-readonly all is good until now.

However, we have different teams and we want each team to access and see only the relevant schemas for them, from the docs it's not clear for me how to do any granular level permissions based on team or user to access/manage only certain schemas.

Example:

• user 1 or team 1 can only interact with [schema-1, schema-2]
• user 2 or team 2 can only interact with [schema-3, schema-4]

Your help would be much appreciated!

[youcefguichi]

hey @carlesarnal, i would really appreciate if i can hear from you concerning this question, since we are a bit on pressure to deliver this one.

From what I understand, Apicurio only supports those three roles and doesn't provide granular content access. If you can confirm this, it will help us determine the next steps. Thanks!

[carlesarnal]

Hello,

No, we don't have that level of granularity. The closest you can get right now is the owner-level authorization, that works both for artifacts and groups.

We have the granular, custom authorization rules on our roadmap, but I don't have any estimates for that kind of feature.