G11 The operator's web console

Requirements

1. G11-R1acceptedMUSTClaim it

   Where an install or update of a third-party plugin names a credential of another service that would cross to it, the console's reading MUST show each one with the setting it is held under, the service whose credential it is and the capability of the plugin's own it is for, and never its value. The operator MUST approve each one apart from the offer, on a switch of its own that is off until turned on; agreeing to the offer MUST approve none of them, and the yes MUST carry each approved one exactly as the reading names it (ARCH-R323, F14-R20). Every update MUST ask again, and a grant the plugin already holds MUST NOT be taken as approved. Where the stack refuses the act for a grant left off, the refusal MUST be drawn in the stack's words.

   locked by

   0.18.0 ▲ unmarked

   cited by

   lemonfiber-web@cfd74f7b86

2. G11-R2acceptedMUSTClaim it

   The console MUST list, for each installed plugin, the grants it holds, each with the setting the credential is held under, the service whose credential it is, the capability it fills and when it was approved, and never a value (ARCH-R323).

   locked by

   0.18.0 ▲ unmarked

   cited by

   lemonfiber-web@4f98cf9f88

3. G11-R3acceptedMUSTClaim it

   The console MUST offer revoking each grant a plugin holds. The revoke MUST be read first, labelled as nothing ended yet, showing the grant it ends and the plugin's services it would restart; the yes MUST carry back the offer the stack named (ARCH-R324). Afterwards the console MUST show whether the grant was ended, the services that restarted and, where they did not, the stack's reason, and MUST say that the plugin stays installed and that rotating the credential is what takes back a value already handed (ARCH-R324).

   locked by

   0.18.0 ▲ unmarked

   cited by

   lemonfiber-web@4f98cf9f88

4. G11-R4acceptedMUSTClaim it

   A plugin's grants, and revoking them, MUST be shown to the operator alone and MUST NOT appear anywhere a member is shown (G10-R9).

   locked by

   0.18.0 ▲ unmarked

   cited by

   lemonfiber-web@4f98cf9f88

5. G11-R5acceptedMUSTClaim it

   The console's credentials panel MUST list every grant beside the credential it crosses, with the plugin it is granted to, the capability it is for and when it was approved, and never a value (ARCH-R325, F14-R20).

   locked by

   0.18.0 ▲ unmarked

   cited by

   lemonfiber-web@4f98cf9f88