Story

As an admin of RHDH, I want to utilize the permission framework and rbac so that I can prevent unauthorized access to the scorecard plugin.

Background

As part of the work to deliver the scorecard plugin, we will also need to incorporate some permissions to the endpoints of the backend plugin. There will also be a need for a common plugin for the exposed permissions.

Name: 'scorecard.metric.read'

Orchestrator example

Dependencies and Blockers

QE impacted work

Documentation impacted work

Acceptance Criteria

Common plugin with the new permissions

Routes protected by the permissions

Upstream documentation updates (design docs, release notes etc)

Technical enablement / Demo