brainstorming permission options #97
Description
Current
- Users and Groups are assigned Realms
- User are seen in all realms
- User attributes could only be changed by their owner Realm
- Groups could only be assigned inside a owner realm
Supported LDAP structure
- ou=realm_name, ...
- ou=people,ou=realm_name
- uid=user, ...
- ou=groups,ou=realm_name
- cn=group, ...
- ou=people,ou=realm_name
- ou=realm_name_2, ...
- ou=people,ou=realm_name_2
- ou=groups,ou=realm_name_2
What options are needed to fulfill many user management Approaches?