Re: [Hawkular-dev] Looking for a first project to integrate accounts

Sorry for a long and slightly confused email - I am probably too ingrained with the current design to understand how this should work. ----- Original Message ----- Is sharing of information possible between personas? It is not possible in inventory between tenants currently so this is the part where I struggle a bit. You can imagine the inventory's tenants as "access points" to disjoint subgraphs in the inventory. You only can access any data if you know your tenant. Also, and possibly more importantly, no entity in inventory is required to have a "globally" unique identifier. The only thing unique is the path to the entity, starting at the tenant, then down the environment, etc. So if a user is a tenant they will not be able to even reference data from other tenants. I guess the my main struggle is that the inventory is modelled after a "physical" layout of the monitoring data - data belongs to some tenant and can be further classified/narrowed down by the environment, etc. In accounts, users/orgs/personas are very fluid concepts that can inherit from each other, etc. while the classification of the data they access is not that fluid. Or am I completely missing the point here? (given my confusion right now, that's more than likely :) ). Inventory's tenant is a crucial part to be able to address any entity. So "knowing a current tenant" to check for permissions is quite ok, but I am not sure I can "just know the current tenant" to be able to address the data. I.e. 2 users are supposed to access data from agent "A" in environment "staging" for "Acme, Inc.", while a third user is supposed to access data from agent "A" in environment "staging" for "Redhat, Inc." I suppose that our model should allow for more organizations (in a SaaS sense, not accounts sense) to have the environment called "staging" and that their agents should be independent. Remember that inventory doesn't have a unique ID of the "staging" environments for the particular organizations. Currently this is resolved by having a set of tenants that are required to have unique names and that you can use to start composing your path to the agents, i.e. "Acme/staging/A" or "Redhat/staging/A". If persona is a tenant, how would that work?