Entitlements: Default closed
- Under review
Context & Scope
In OSDU R3, OSDU will be a default closed system.
OSDU public documentation should include example how to configure an existing OSDU environment to be an open one. Similarly, OSDU R3 configuration coming from OSDU, will include a setup that uses existing entitlements service and/or additional user attributes to ensure behavior that is consistent with OSDU R2 behavior.
From the security perspective, one would want the default setting to be the tightest possible, ensuring that the system is secure by default.
- System is configurable.
- System is secure by default.
Decision criteria and trade-offs