What do you want to improve?
Document of RBAC UI Interface for implementing Roles and Permission use cases
- especially conditional ones and
- those can be implemented using variables in the permission policy as code.
What does the current documentation state?
The current documentation provides basic information on configuring the RBAC UI plugin.
What would you like to be added/updated in the documentation?
The documentation should elaborate on how to define roles for different use cases. It should document the limitation related to using conditional permission rules. Especially implementing conditional policies like follows:
anyOf: [
catalogConditions.isEntityOwner({
// particularly this condition where a variable is used as claim.
claims: user?.identity.ownershipEntityRefs ?? [],
}),
isInSystem({ systemRef: 'system:default/podcast' }),
],
If that is not a limitation, then the documentation could provide guidance on implementing it using RBAC UI as well as API.