Admin API
With v2 (i.e. without LDAP) we can no longer create groups via Ansible with ldap_entry
. We currently use a custom Ansible module for creating roles that imports the DB models and directly writes to the DB. A proper API for all of that would be cleaner and more stable.
- CLI command to manage API credentials
- CRUD-like REST-API for
- User (+ role memberships)
- Group
- Role (+ included role and group)
- OAuth2Client (#107 (closed))
- APIClient (#107 (closed))
- Service (#107 (closed))
- Loginname blocklist entries (#107 (closed))
- Simplistic access control for now (either full permissions or none), maybe more powerful ACLs later
Depends on #107 (closed)
Edited by Julian