Details
-
Type:
New Feature
-
Status:
Closed
-
Priority:
Critical
-
Resolution: Fixed
-
Affects Version/s: 1.6
-
Fix Version/s: 1.12
-
Component/s: Authentication & Authorization
-
Labels:None
-
Number of attachments :
Description
Now, only an administrator user is possible in Sonar to configure all sonar aspects. Sonar should have a complete user/role management.
I think that we can have following defined roles:
- administrator: that permit the existing administration features,
- project administrator: to configure all about a defined project,
- project viewer: to view all about a defined project,
- profile administrator: to configure all about a selected profile,
- profile viewer: to view all about a selected profile,
- guest: ???
Users should be able to auto-register, next the administrator set them the right rights.
The user/role management system should be able to act with external repository as LDAP/database where authentication/authorization information are stored.
Attachments
Issue Links
| This issue is duplicated by: | ||||
| SONAR-405 | Provite a basic authentication and authorization mechanism to secure access to projects |
|
|
|
| This issue relates to: | ||||
| SONAR-361 | LDAP connector to authenticate on sonar website |
|
|
|
| This issue is related to: | ||||
| SONAR-1046 | Create users group by project |
|
|
|
Please just use spring security. It will make integrating with enterprise systems so much easier.