Description of problem:

As part of RHN EOL we wish to have more controls around user permissions in the portal relating to subscription management. One application is around Activation Keys.

We are looking to be provided with an interface we can implement in our adapter layer so that we can set some 'ActivationKeyRole' based on permissions from our own IT user service. This role should be all-or-nothing.

This should behave similarly to system level access controls in that they are enforced for a given user when we include the cp-user and cp-lookup-permissions headers.

The reason we need Candlepin to have such a role is because it needs to be enforced by the portal and the subscription.rhsm.redhat.com API


Version-Release number of selected component (if applicable): all