18 lines
454 B
Markdown
18 lines
454 B
Markdown
|
# ADR 0003: Resource Model
|
||
|
|
|
||
|
|
## Status
|
||
|
|
|
||
|
|
Accepted.
|
||
|
|
|
||
|
|
## Decision
|
||
|
|
|
||
|
|
Everything meaningful is modeled as a resource. Initial kinds are `db`, `kv`,
|
||
|
|
`pipe`, `document`, `pubsub`, `cas`, and `ssh-proxy`.
|
||
|
|
|
||
|
|
Resources have capability-scoped authorization. Roles may exist as bundles, but
|
||
|
|
capabilities are the underlying permission unit.
|
||
|
|
|
||
|
|
## Consequences
|
||
|
|
|
||
|
|
Resource APIs, auth logs, secrets, and future replication can share one model
|
||
|
|
without relying on global roles.
|