Details
-
Type: Bug
-
Status: Closed
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: 2.1.0
-
Fix Version/s: 2.1.0
-
Component/s: Security Framework
-
Labels:None
-
Sprint:Sprint 15, Sprint 2 - Cumberland, Sprint 3 - Cumberland, Sprint 4 - Cumberland, Sprint 5 - Cumberland, Sprint 6 - Cumberland, Sprint 7 - Cumberland
Description
As currently implemented, realm ids are not hierarchical, which makes permission matching somewhat odious. The design of the security system allows for regex-based matching on permissions such that TSA admins can have control over reseller resources, and resellers control over merchant resources. Even if this capability isn't used now, we should ensure the underlying data will support the use case.