I'm working on developing an API that allows users to retrieve blobs from Azure Storage (RBAC) using Azure AD OAuth2 authentication. Here's the scenario: Users will authenticate using Azure AD OAuth2 (Authorization Code flow keeping scope as access-as-user) it generates…
I am attempting to provide access to someone on my account using least-required access by creating an RBAC rule in Azure that gives the person the ability to manage, create, and delete networking resources. However, when they attempt to delete…
I have 4 entities : User(id*, ...) Permission(user_id*, resource_id*, resource_type, role) Resource1(id*, ...) Resource2(id*, ...) Resource1 and Resource2 share no semantic relation and are completely independant. How can I force my database to ensure that Permission.resource_id exists in one and…
I want a deployment in kubernetes to have the permission to restart itself, from within the cluster. I know I can create a serviceaccount and bind it to the pod, but I'm missing the name of the most specific permission…
I want to allow only listing of resources and not the manifest content. Example, NAME READY STATUS RESTARTS AGE airflow-redis-0 1/1 Running 0 32h airflow-postgresql-0 1/1 Running 0 32h airflow-scheduler-9416ddfd6f-n7jcr 2/2 Running 0 32h airflow-webserver-9bf7f3c95c-kf1fx 1/1 Running 0 32h airflow-worker-0…