gabriel-weaver/Hierarchical-Diff — Issue #12: Configuration-Language-Based Access Control
Author: gabriel-weaver
Created: 2011-12-15 20:45:29+00:00
State: open

Experience with a crudely delegated user interface to our internally developed configuration management system convinced us that delegated access to configuration systems was worth pursuing properly. This paper outlines our approach to authorising access both to individual aspects of configurations and to collections of configurations. We advocate the use of authorisation of some kind on configuration changes and we believe that the system of authorising primitive manipulations of a configuration representation outlined herein could be accommodated by a number of existing configuration systems. The authorisation system described is still experimental and we regret that real world experience of the system in use with end users is not yet available.

http://www.usenix.org/event/lisa08/tech/full_papers/higgs/higgs_html/

Conversation with Colin Higgs at LISA 2011.