454 B
454 B
ADR 0003: Resource Model
Status
Accepted.
Decision
Everything meaningful is modeled as a resource. Initial kinds are db, kv,
pipe, document, pubsub, cas, and ssh-proxy.
Resources have capability-scoped authorization. Roles may exist as bundles, but capabilities are the underlying permission unit.
Consequences
Resource APIs, auth logs, secrets, and future replication can share one model without relying on global roles.