Skip to content

Commit 714012f

Browse files
docs: Update docs/decisions/0002-authorization-model-foundation.rst
Co-authored-by: María Fernanda Magallanes <[email protected]>
1 parent 0c553ea commit 714012f

1 file changed

Lines changed: 7 additions & 7 deletions

File tree

docs/decisions/0002-authorization-model-foundation.rst

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,15 @@ Context
99
*******
1010
Open edX needs a single way to decide: who can do what, on which resource, and under which conditions. Today, permissions are checked in many different ways. Some systems are feature-specific (``student_courseaccessrole``, ``django_comment_client_role``, ``contentlibrarypermission``). Others use global roles passed in JWTs. Many checks are written directly in code (``if user.is_superuser``). This makes the system hard to extend, hard to change, and not easy to audit.
1111

12-
We want an authorization model that is:
12+
We want an authorization model that:
1313

14-
* Clear and consistent vocabulary everywhere.
14+
* Uses a clear and consistent vocabulary throughout.
1515
* Explicitly supports industry standards and is built on battle-tested technologies.
16-
* Flexible but still simple to maintain.
17-
* Able to explain every decision (the system should be transparent on why access was granted or not).
18-
* Unified and centralized enforcement rather than ad-hoc implementations for immediate needs.
19-
* Able to support query-based access patterns out of the box.
20-
* Focused on connecting stakeholders and making policies clear and accessible to everyone involved.
16+
* Is flexible but still simple to maintain.
17+
* Can explain every decision (the system should be transparent on why access was granted or not).
18+
* Enforces decisions in a unified and centralized way, rather than ad-hoc implementations for immediate needs.
19+
* Supports query-based access patterns out of the box.
20+
* Focuses on connecting stakeholders and making policies clear and accessible to everyone involved.
2121

2222
.. note::
2323

0 commit comments

Comments
 (0)