prosody-modules
f61564b522f7
mod_authz_delegate/README.md

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Comparison

mod_authz_delegate/README.md @ 5288:f61564b522f7

mod_authz_delegate: introduce module to "link" authorization of hosts See the readme :-). Motivation is allowing Snikket admins to change circle avatars via the web portal without bypassing Prosody access checks.
author Jonas Schäfer <jonas@wielicki.name>
date Wed, 29 Mar 2023 17:21:45 +0200
comparison
equal deleted inserted replaced
5284:5178c13deb78 5288:f61564b522f7
1 ---
2 summary: Authorization delegation
3 rockspec: {}
4 ...
5
6 This module allows delegating authorization questions (role assignment and
7 role policies) to another host within prosody.
8
9 The primary use of this is for a group of virtual hosts to use a common
10 authorization database, for example to allow a MUC component to grant
11 administrative access to an admin on a corresponding user virtual host.
12
13 ## Configuration
14
15 The following example will make all role assignments for local and remote JIDs
16 from domain.example effective on groups.domain.example:
17
18 ```
19 VirtualHost "domain.example"
20
21 Component "groups.domain.example" "muc"
22 authorization = "delegate"
23 authz_delegate_to = "domain.example"
24 ```