permissions #10

permit a specific matrix user for one or multiple commands

I think it makes sense to be able to grant permissions on all levels:

all - omnipotent admin user. not sure about this as it promotes bad practices (principle of least privilege)
project
service
subcommand
args

I'd suggest a regex for configuring what is allowed on a specific level. Lookup wise it would iterate through all levels from top to bottom and if a user has the permission level configured match the configured regex. If it matches grant access, otherwise don't.

Also edited the OP to only matrix user for the moment. See #23 for group permissions.

I think it makes sense to be able to grant permissions on all levels: 0. all - omnipotent admin user. not sure about this as it promotes bad practices (principle of least privilege) 1. project 2. service 3. subcommand 4. args I'd suggest a regex for configuring what is allowed on a specific level. Lookup wise it would iterate through all levels from top to bottom and if a user has the permission level configured match the configured regex. If it matches grant access, otherwise don't. Also edited the OP to only matrix user for the moment. See #23 for group permissions.

Labels Milestones

permissions #10