-
Notifications
You must be signed in to change notification settings - Fork 165
Description
Description
Add Global scope functionality to the existing RBAC implementation to enable easy migration of current super admin and monitor roles into the RBAC system.
Implementation Options
There are several approaches to represent Global scope in the RBAC database schema:
- Store a constant string value only in the scope type field, leaving scope ID empty
- Store constant string values in both scope type and scope ID fields, allowing queries on either field
- Other approaches
Recommended Approach
Global scope should be implemented by specifying a constant string only in the scope type field, since conceptually, global scope is inherently a type without a specific ID. This approach better reflects the semantic nature of global permissions that apply system-wide rather than to specific resources.
JIRA Issue: BA-2478
Metadata
Metadata
Assignees
Labels
No labels