Permissions inheritance on fine grained authz

[oculos]

Description

It should be possible to allow a newly created resource to have the permissions settings of its parent resource. Case in point: groups.

If a user has the right to manage a certain group, it should be possible to choose that, when he creates a child group, he’d also have the same rights on that group.

With fine grained authz, permissions are not even enabled on the new resource. It should be possible for the new resource to inherit the permissions of the parent resource.

Discussion

No response

Motivation

Delegating group management today is impaired because I user cannot manage a group he has created.

Details

No response