Better user/role management

[bochi]

Hi,
this is an enhancement request for the user/role concept of Uyuni.

It would be nice to have more granular roles, or even the possibility to create own roles with more granular permissions.

Examples:

• Read Only User who can look at systems but not change anything (that was missed by quite a few customers in SUMA already)
• Users that can apply updates but not change channel assignments or system groups
• Users that can only apply updates or install packages, reboot machines but nothing else

[paususe]

I agree this would be a useful enhancement.

I have been involved in projects to implement something like this in the past and they are quite complex in terms of analysis (not that much in terms of implementation)

One would need to go over the full functionality of Uyuni and:

1. Determine granularity
2. Determine dependencies (if user is allowed to do this, then he needs to have that too)
3. Determine incompatibilities (i. e. if you don't have this then you should no have that)
4. etc

If you could provide something in that direction, that would surely help.

[Etheryte]

This feature is now underway, tracked under https://github.com/SUSE/spacewalk/issues/24058 and uyuni-project/uyuni-rfc#95. Closing this ticket in favor of those.