Skip to content

Commit 29e2e13

Browse files
committed
docs: delete exp overview with redirect, remove leftover note in ref relation
1 parent cafc35e commit 29e2e13

File tree

3 files changed

+2
-68
lines changed

3 files changed

+2
-68
lines changed

explanation/jaas_overview.md

Lines changed: 0 additions & 58 deletions
This file was deleted.

redirects.txt

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,4 +33,5 @@ howto/setup_dashboard/ howto/manage-jimm-controllers/
3333
howto/bootstrap_permissions/ howto/manage-jimm-controllers/
3434
reference/jaas/authorisation_data/ reference/relation/
3535
reference/jaas/authorisation_model/ reference/relation/
36-
reference/jaas/authorisation/ reference/relation/
36+
reference/jaas/authorisation/ reference/relation/
37+
explanation/jaas_overview/ reference/jaas/jaas_architecture

reference/relation.md

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,6 @@ JAAS reshapes Juju's permission model based on access levels into the more flexi
1616
1717
```
1818

19-
20-
```{note}
21-
**JAAS relations vs. {external+juju:ref}`Juju relations <relation>`:** JAAS relations have nothing to do with Juju relations., which refer to the relationship, or rather integration, of two charmed applications. However, JAAS relations are related to Juju access levels.
22-
23-
**JAAS relations vs. {external+juju:ref}`Juju access levels <user-access-levels>`:** With Juju access levels a user is granted access to another entity. With JAAS relations, a user, service account, role or group is brought into a relation with another entity, where the relation is about access to the entity. In short, JAAS supports access for more entity types and reshapes the Juju permission model into the more flexible [ReBAC](https://openfga.dev/docs/authorization-concepts#what-is-relationship-based-access-control) paradigm -- both features desirable at an enterprise level. Note: Currently JAAS relations are parallel to Juju access levels, but in the future they're expected to be a superset thereof.
24-
25-
```
26-
27-
2819
<!--following [Relation Based Access Control (**ReBAC**)](https://en.wikipedia.org/wiki/Relationship-based_access_control) and using [OpenFGA](https://openfga.dev/docs/concepts#what-is-a-relation),-->
2920

3021
In JAAS, a relation is a string in an [OpenFGA ReBAC authorization model](https://openfga.dev/docs/authorization-concepts#what-is-relationship-based-access-control) that is part of a tuple consisting of an entity type A (in OpenFGA: 'user'; in JAAS: 'object'), the relation, and an entity type B (in OpenFGA: 'object'; in JAAS: 'target), where the relation is defined by type B and represents an entitlement of entity type A on the entity type B (i.e., it is about permission for A to perfom an action on B).

0 commit comments

Comments
 (0)