Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implementation of filtering for project display management by google user #92

Open
Zyrox-pixel opened this issue Jul 9, 2020 · 2 comments

Comments

@Zyrox-pixel
Copy link

In the context of an organization, if a google user does not have access to a project then he should only see his projects and not the others

For example in an organization with 10 projects, if the user [email protected] has the right to only 4 projects, then after being authenticated on Zorya he should only see his 4 projects

@eranchetz
Copy link
Contributor

Hey @Zyrox-pixel thanks for the feedback, currently Zorya is authenticating with the default service account, this can be changed easily see docs here.
We currently have no plans to implement user access polices or IAM into Zorya, my suggestion would be to deploy single instance of zorya into each project with specfic permissions to that project.

@Zyrox-pixel
Copy link
Author

Hello @eranchetz Thank you for your feedback.

At the moment there is only one default service account used by this application and I would like that following the authentication via IAP, that the application authenticates with the user's service account not the default appspot service account.

How would you suggest that I implement this ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants