Re: [Hawkular-dev] Tenancy model (was Re: Do not depend on Keycloak anymore)
On 18 Apr 2016, at 17:14, Juraci Paixão Kröhling wrote:
Another aspect that comes with the removal of the dependency on
Keycloak
is surrounding tenancy. We don't have the same requirements as before,
and in the case described above where Hawkular could be seen as a
"database", the tenancy would/should be managed on the user-facing
application.
Not sure I completely understand. When e.g. RHQ
uses Postgres, it always logs in as "rhqadmin/rhqadmin".
There is no forwarding of the logged in RHQ-user
to Postgres, but Postgres is always accessed by the
technical user.
This means that we'd have a breaking change for components like
Inventory and Metrics, where the tenant is currently the same as the
persona, which in turn is derived from the logged in user (or
organization selected on the account switcher). Not having a tenancy
model anymore means that all users are of the same tenant, so,
components that care about tenancy should be changed.
Yes. And this is fine, as there is only one user,
which then belongs to a "default tenant".
--
Reg. Adresse: Red Hat GmbH, Technopark II, Haus C,
Werner-von-Siemens-Ring 14, D-85630 Grasbrunn
Handelsregister: Amtsgericht München HRB 153243
Geschäftsführer: Paul Argiry, Charles Cachera, Michael Cunningham,
Michael O'Neill