RBAC M2: Building the roles and permissions core #14

Core implementation of roles and permissions.

Implements the backend system defined in the architecture phase. Depending on the chosen direction (centralized service or embedded library), the system will include the RBAC data models, permission logic, and integration with Open edX. Deliverables:
● RBAC data models, APIs, and logic
● Central service or embedded utility
● Test suite (TDD)
● ADRs for implementation decisions
● Developer integration documentation

Based on the user stories for the Libraries AuthZ MVP https://openedx.atlassian.net/wiki/spaces/OEPM/pages/5209980941/Scope+of+the+implementation+for+the+AuthZ+MVP+as+a+whole#User-stories-(flows)-we-are-going-to-cover these are the needs:

Roadmap

1. Create a solid model.conf to test Casbin with a use case close to what we'll implement.
2. Build engine utilities for the Casbin-based authorization engine. This includes enforcers, adapters, matchers, and other Casbin-specific tools needed for our APIs.
3. Develop APIs as the main interface to be used by services and our own REST APIs (this is our api.py).
4. Add REST APIs which consume our api.py.
   • API methods needed
     • CRUD over the assignments (grants)
     • Method and endpoint to obtain all the users who have permissions over a resource.
     • Be able to filter and sort them
     • Method and endpoint to obtain the available roles, their description, and their permissions.