Bug 1322037

Summary:	[RFE] Add ActivationKey Role
Product:	[Community] Candlepin	Reporter:	Jonathon Turel <jturel>
Component:	candlepin	Assignee:	candlepin-bugs
Status:	CLOSED DEFERRED	QA Contact:	Katello QA List <katello-qa-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	0.9.52
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-07-13 17:14:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Jonathon Turel 2016-03-29 15:34:50 UTC

Description of problem:

As part of RHN EOL we wish to have more controls around user permissions in the portal relating to subscription management. One application is around Activation Keys.

We are looking to be provided with an interface we can implement in our adapter layer so that we can set some 'ActivationKeyRole' based on permissions from our own IT user service. This role should be all-or-nothing.

This should behave similarly to system level access controls in that they are enforced for a given user when we include the cp-user and cp-lookup-permissions headers.

The reason we need Candlepin to have such a role is because it needs to be enforced by the portal and the subscription.rhsm.redhat.com API


Version-Release number of selected component (if applicable): all