Skip to content

Design: Authorization in Substrate #936

New issue
New issue
Closed
Feature
Closed
Design: Authorization in Substrate#936
Feature
Assignees
SHRUTI6991
Labels
area/securitySecurity related issue/prkind/designDesign discussion, investigation, or research required before implementationkind/featureAn enhancement / feature request or implementation

Description

@SHRUTI6991
Shruti Nair (SHRUTI6991)
opened on Aug 13, 2026

Provide an authorization model for Substrate.

Current Choices

  1. OpenFGA - Relationship based auth engine that does graph traversals at runtime to find our permissions for subjects.
  2. CloudIAM - Provides system defined list of roles at specific scopes like cluster, atespace or instance.
  3. K8 RBAC - Provide K8 style RBAC with Role + RoleBinding.

Design proposal

https://docs.google.com/document/d/1LYjBlXWLJ18beLDw74Rs_Tq38wFkCTeau4_7_98Op3c/edit?resourcekey=0-zY5W-u0AlAT_GIU6i394CQ&tab=t.6uuc4ftvayew

Activity

  1. SHRUTI6991 commented on Aug 13, 2026

    @SHRUTI6991
    Shruti Nair (SHRUTI6991)
    on Aug 13, 2026
    CollaboratorAuthor

    /assign Shruti Nair (@SHRUTI6991)

  2. Shruti Nair (SHRUTI6991)
    changed the title [-]Minimal set of AuthZ policies in ate api[/-] [+]Minimal set of AuthZ policies in Substrate[/+] on Aug 13, 2026
  3. Aditya Shantanu (aditya-shantanu)
    added
    kind/featureAn enhancement / feature request or implementation
    area/securitySecurity related issue/pr
    on Aug 14, 2026

  4. SHRUTI6991 commented on Aug 17, 2026

    @SHRUTI6991
    Shruti Nair (SHRUTI6991)
    on Aug 17, 2026
    CollaboratorAuthor

    https://docs.google.com/document/d/1LYjBlXWLJ18beLDw74Rs_Tq38wFkCTeau4_7_98Op3c/edit?resourcekey=0-zY5W-u0AlAT_GIU6i394CQ&tab=t.0

  5. Shruti Nair (SHRUTI6991)
    changed the title [-]Minimal set of AuthZ policies in Substrate[/-] [+]Design: Authorization in Substrate[/+] on Aug 17, 2026
  6. haiyanmeng
    assigned
    Shruti Nair (SHRUTI6991)
    on Aug 20, 2026
  7. haiyanmeng
    added the
    Feature
    issue type on Aug 20, 2026
  8. Bowei Du (bowei)
    added
    kind/designDesign discussion, investigation, or research required before implementation
    on Sep 17, 2026
  9. Shruti Nair (SHRUTI6991)
    added a parent issue on Oct 18, 2026

  10. SHRUTI6991 commented on Oct 18, 2026

    @SHRUTI6991
    Shruti Nair (SHRUTI6991)
    on Oct 18, 2026
    CollaboratorAuthor

    This is done and implemented via OpenFGA.

  11. Shruti Nair (SHRUTI6991)
    closed this as completedon Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

area/securitySecurity related issue/prkind/designDesign discussion, investigation, or research required before implementationkind/featureAn enhancement / feature request or implementation

Type

Feature

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions