Mercurial > prosody-modules
comparison mod_authz_delegate/README.md @ 5288:f61564b522f7
mod_authz_delegate: introduce module to "link" authorization of hosts
See the readme :-).
Motivation is allowing Snikket admins to change circle avatars via
the web portal without bypassing Prosody access checks.
| author | Jonas Schäfer <jonas@wielicki.name> |
|---|---|
| date | Wed, 29 Mar 2023 17:21:45 +0200 |
| parents | |
| children |
comparison
equal
deleted
inserted
replaced
| 5284:5178c13deb78 | 5288:f61564b522f7 |
|---|---|
| 1 --- | |
| 2 summary: Authorization delegation | |
| 3 rockspec: {} | |
| 4 ... | |
| 5 | |
| 6 This module allows delegating authorization questions (role assignment and | |
| 7 role policies) to another host within prosody. | |
| 8 | |
| 9 The primary use of this is for a group of virtual hosts to use a common | |
| 10 authorization database, for example to allow a MUC component to grant | |
| 11 administrative access to an admin on a corresponding user virtual host. | |
| 12 | |
| 13 ## Configuration | |
| 14 | |
| 15 The following example will make all role assignments for local and remote JIDs | |
| 16 from domain.example effective on groups.domain.example: | |
| 17 | |
| 18 ``` | |
| 19 VirtualHost "domain.example" | |
| 20 | |
| 21 Component "groups.domain.example" "muc" | |
| 22 authorization = "delegate" | |
| 23 authz_delegate_to = "domain.example" | |
| 24 ``` |