[XCON] identity and groups

[Cullen Jennings <fluffy at cisco.com>]

Right now we have an idea of a permission applying to some named user, or to
a named Role and any user that has that Role gets the permission.

I think it would also be very useful to introduce an idea of a group. You
could say some named group - perhaps "faculty", has some given permissions.
What this means is more or less out of scope for XCON but the conference
system would be using some access control system to determine if a given
user what in that group or not.

This might be the same as a sphere - I don't know. It is different that a
role in that the roles have specific meaning to the users role in the
commerce system while the group has specific meaning to the users role in
the access control system.

I'd like to add this concept.





_______________________________________________
XCON mailing list
XCON at ietf.org
https://www1.ietf.org/mailman/listinfo/xcon