Design Universal ReportStream Authorization Strategy

[arnejduranovic]

Outcome/Objective

ReportStream shall support a flexible and secure authorization pattern in order to meet diverse user and application needs.

Description

Product Requirement(s)

There has been work to investigate roles and permissions for different user use cases, but this work was never published and synthesized into formal requirements: https://app.mural.co/t/primedatainput6410/m/primedatainput6410/1707502140746/6af0ac6188bf57666b601c7563abee95385f5a4f

Use Case(s)

• The ReportStream website may make requests to ReportStream resource endpoints on behalf of an Okta User
• An Okta Application may make requests to ReportStream resource endpoints

Dependencies

Acceptance criteria

• New secure and flexible authorization strategy outlined
• Migration plan for getting new authorization live
• Migration plan for AuthN microservice

Technical Requirement(s)