On Mar 7, 2011, at 8:22 AM, James Turnbull wrote: > Depends whether they are the same thing but yes assuming we do store > some concept of roles in the master then it should be the SoT.
James and I just talked about this, and we have some more questions. We agree that the master should be the source of truth, but this could make it very difficult to manage RBAC in Dashboard's GUI. And (James reminded me) there can be multiple Dashboards on one site. We briefly toyed with the idea of an authorization service, managed by one Puppet Master and queried, and perhaps manipulated, by a Dashboard plugin. This would give us SOT. Very hand-wavy at this point. r -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to puppet-dev@googlegroups.com. To unsubscribe from this group, send email to puppet-dev+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.
