Commits on Oct 17, 2024

1. WIP - allow org-admins to modify organizations …

   In addition to give org-admins permissions to CRUD organizations,
   this removes the requirement that in order to modify an organization,
   the actor must be a member of the organization.
   
   However, they must still have appropriate permissions to perform any CRUD action
   related to an organization.
   
   This supports the multi-tenancy case where a customer has many organizations to manage
   but does not necessarily need to admins to be a part of those organizations. The primary
   use case is SaaS offering , in which customers have full control over a chef
   server installation but do not have local/chef-server-ctl access, and
   must keep the pivotal key locked down for security purposes.
   
   This functionality is already available using the pivotal/superuser key, but the
   pivotal key should not be widely distributed. This functionality was also originally
   intended to be available to org-admins but the completion of that work was never
   prioritized.
   
   Signed-off-by: Marc A. Paradise <[email protected]>

   

   marcparadise committed Oct 17, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 172b8d0
   • Browse repository at this point

   Copy the full SHA

   172b8d0 View commit details

   Browse the repository at this point in the history