From 6dd68e0df8b4d9214bfb931a2796134c75b67b4d Mon Sep 17 00:00:00 2001 From: Patrick Maier Date: Thu, 17 Dec 2020 12:54:30 +0100 Subject: [PATCH] Update release_notes.md --- docs/ocis/release_notes.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/docs/ocis/release_notes.md b/docs/ocis/release_notes.md index 6f3d2ae22..cbcb54391 100644 --- a/docs/ocis/release_notes.md +++ b/docs/ocis/release_notes.md @@ -221,14 +221,15 @@ For more sophisticated and production setups we recommend to use one of our prop - What can you do with it? - Extensions? -##### Roles & permissions system -- How is the framework designed? (permissions for actions are available in the system => can be bundled to roles) -- Currently available permissions: Manage accounts (gives access to the user management) -- Current roles are default roles defined in config files (??) +##### Roles & Permissions System +Infinite Scale follows a role-based access control model. Based on permissions for actions which are provided by the system and by extensions, roles can be composed. Ultimately, these roles can be assigned to users to define what users are permitted to do. This model allows to realize a segregation of duties for administration and allows to control granularly how different types of users (e.g., Guests) can use the platform. + +- Currently available permissions: Manage accounts (gives access to the internal user management) +- The current roles are exemplary default roles which defined in config files - "Admin": Has the permission to "manage accounts" - "User": Does not have any dedicated permission - "Guest": Does not have any dedicated permission -- Currently a user can have only one role +- Currently a user can only have one role - Users with the role "Admin" can assign/unassign roles to/from other users (as part of the permission to "manage accounts") #### APIs