Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating security & id portions #33

Merged
merged 1 commit into from
Apr 24, 2020
Merged

Updating security & id portions #33

merged 1 commit into from
Apr 24, 2020

Conversation

arthurdm
Copy link
Member

Fixes #18 and removes the concept of an id for now.

The security aspects will be expanded in the future via #31.

@arthurdm arthurdm requested a review from sbose78 April 24, 2020 16:28
@sbose78
Copy link
Contributor

sbose78 commented Apr 24, 2020

Do we want to add the guidance on doing Subject Access reviews ?

@arthurdm
Copy link
Member Author

I am thinking about leaving that for RC2 or beyond, since different use cases (e.g. using an Operator, or Tekton Pipeline, or a dev directly using SBO, or someone using odo, etc) would probably need different guidance.

Right now the spec is just suggesting the metadata declared by the bindable service for the role needed, and leaving the implementation details open. Would be interesting to start prototyping this in SBO, which would likely improve our understanding of the flow.

Perhaps we can revisit as part of #31?

@sbose78
Copy link
Contributor

sbose78 commented Apr 24, 2020

Sounds good!

@arthurdm arthurdm merged commit 9c0ed0e into master Apr 24, 2020
@arthurdm arthurdm deleted the security branch April 24, 2020 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Define the security aspects of the specification
2 participants