[Hawkular-dev] Tenancy model (was Re: Do not depend on Keycloak anymore)

[Heiko W.Rupp]

On 18 Apr 2016, at 17:14, Juraci Paixão Kröhling wrote:

> Another aspect that comes with the removal of the dependency on 
> Keycloak
> is surrounding tenancy. We don't have the same requirements as before,
> and in the case described above where Hawkular could be seen as a
> "database", the tenancy would/should be managed on the user-facing
> application.

Not sure I completely understand. When e.g. RHQ
uses Postgres, it always logs in as "rhqadmin/rhqadmin".
There is no forwarding of the logged in RHQ-user
to Postgres, but Postgres is always accessed by the
technical user.


> This means that we'd have a breaking change for components like
> Inventory and Metrics, where the tenant is currently the same as the
> persona, which in turn is derived from the logged in user (or
> organization selected on the account switcher). Not having a tenancy
> model anymore means that all users are of the same tenant, so,
> components that care about tenancy should be changed.

Yes. And this is fine, as there is only one user,
which then belongs to a "default tenant".


-- 
Reg. Adresse: Red Hat GmbH, Technopark II, Haus C,
Werner-von-Siemens-Ring 14, D-85630 Grasbrunn
Handelsregister: Amtsgericht München HRB 153243
Geschäftsführer: Paul Argiry, Charles Cachera, Michael Cunningham, 
Michael O'Neill