-
Notifications
You must be signed in to change notification settings - Fork 0
User Isolation and Repository Ownership #25
Copy link
Copy link
Open
Labels
areas::processes::planningHigh-level strategy and planningHigh-level strategy and planningtasks::review::securityVulnerabilities and safe data handlingVulnerabilities and safe data handling
Description
Activity
Metadata
Metadata
Assignees
Labels
areas::processes::planningHigh-level strategy and planningHigh-level strategy and planningtasks::review::securityVulnerabilities and safe data handlingVulnerabilities and safe data handling
Type
Projects
- StatusShow more project fieldsIn Review
- StatusShow more project fieldsNew
Overview
User permissions are handled through the repositories given by OwlCore.Nomad.Kubo. Each Discord user will have their own, ensuring that a user only receives a modifiable object when they own that object.
These are designed to hold all Nomad-related data and (crucially) to isolate multiple users when running on a single machine.
Repository Ownership
While the CLI gives you full control over the
--repo-idparameter for local testing, this will not be exposed to the end user via the Discord bot.The most straightforward and reliable way to signal repo ownership is to use the owner's Discord ID as the repo id for all user, project and publisher data.
Limitations
However, for projects and publishers, this approach does not lend itself well to:
See #26 for more on this. We may need additional planning on entity ownership transfer.