+++ This bug was initially created as a clone of Bug #994984 +++ Implement the predefined access policies feature, as described in: http://beaker-project.org/dev/proposals/access-policies-for-systems.html The core system access policy feature that this builds on was implemented and released in Beaker 0.15.0. http://beaker-project.org/docs/whats-new/release-0.15.html#system-access-policies
This feature is now described in its own design proposal: https://beaker-project.org/dev/proposals/predefined-access-policies.html
Given that this proposal now includes the introduction of the "System Pools" feature, it needs to be checked for possible impacts on the supported reporting queries.
DB/HTTP API bits: http://gerrit.beaker-project.org/#/c/4011/
Let's leave this at ASSIGNED until there is a complete patch series posted.
Bits remaining before the design proposal can be considered implemented: * bkr pool-create * bkr pool-modify * bkr pool-add * bkr pool-remove * bkr policy-grant --pool= * bkr policy-revoke --pool= * bkr system-modify --pool-policy= / --use-custom-policy * web UI for choosing active policy for a system * web UI for browsing pools * web UI for editing a pool, including its policy Pool deletion is listed as a deferred feature in the design proposal, but I think we will definitely need pool deletion and pool renaming in Beaker 20. So that is a follow-on RFE: bug 1199347.
(In reply to Dan Callaghan from comment #5) > * web UI for browsing pools http://gerrit.beaker-project.org/4025
(In reply to Dan Callaghan from comment #5) > Bits remaining before the design proposal can be considered implemented: > > * bkr policy-grant --pool= > * bkr policy-revoke --pool= http://gerrit.beaker-project.org/#/c/4031/ > * bkr system-modify --pool-policy= / --use-custom-policy http://gerrit.beaker-project.org/#/c/4032/
(In reply to Dan Callaghan from comment #5) > Bits remaining before the design proposal can be considered implemented: > > * web UI for choosing active policy for a system http://gerrit.beaker-project.org/#/c/4046/
(In reply to Dan Callaghan from comment #5) > Bits remaining before the design proposal can be considered implemented: > > * bkr pool-create http://gerrit.beaker-project.org/#/c/4055/
(In reply to Dan Callaghan from comment #5) > Bits remaining before the design proposal can be considered implemented: > > * bkr pool-add > * bkr pool-remove http://gerrit.beaker-project.org/#/c/4066/
(In reply to Dan Callaghan from comment #5) > Bits remaining before the design proposal can be considered implemented: > > * web UI for editing a pool, including its policy matt's patch: http://gerrit.beaker-project.org/#/c/4057/
(In reply to Dan Callaghan from comment #5) > Bits remaining before the design proposal can be considered implemented: > > * web UI for choosing active policy for a system http://gerrit.beaker-project.org/#/c/4082/
Some docs describing the feature: Updated glossary to include what a active access policy, system pool and a system pool access policy is: https://beaker-project.org/docs-develop/glossary.html System pools: https://beaker-project.org/docs-develop/user-guide/interface/pools.html Shared access policies: https://beaker-project.org/docs-develop/user-guide/systems/sharing.html#shared-access-policies
Beaker 20.0 has been released.