Comment 2 for bug 1581931
Revision history for this message
| Ihar Hrachyshka (ihar-hrachyshka) wrote | #2 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
0e1f616
(Get the code!)
While it's nice to have exclusion mechanism, is it really worth it complicating the code for that? What's the problem with having multiple RBAC entries? Does it significantly slow down any API operations?
Or it's just a matter of involving orchestration to maintain all those RBACs as a single logical policy? Even with the proposal implemented, you would still need to maintain multiple RBACs entries for your needs (one global + one exclusion).