AAA: Helium: Release Plan

Candidate Release Plan

DONE

Candidate Release Plan

Release Plan

DONE

Final Release Plan

Project setup

DONE

Project setup in Git and Jenkins

Pluggable AuthN framework

DONE

Support for AuthN filters, security context

MD-SAL AuthZ

PoC

Access control for MD-SAL rpc, data store, and pub/sub

Access policy engine

PoC

Define access control policies and an engine to process them

IdMLight

PROGRESS

Provides user/role/domain CRUD & username/password authentication

SSSD Integration

PROGRESS

Support SSSD as an IdP

OSGi application security

Deferred

Leverage OSGi security to apply access permissions on Karaf features

API Freeze

FINALIZING

All APIs are defined, but still need to verify with other consumer projects (dlux, etc...) before finalizing them (this week, 8/4)

AuthZ-enabled MDSAL API

DONE

API changes for AuthZ-enabled MD-SAL

Access Policy API

FINALIZING

API for Access Policy CRUD

IdMLight API

FINALIZING

API for user/role/domain and role assignment CRUD

Token endpoint API

DONE

API for creating an access token

Karaf integration

DONE

AAA as Karaf features

Code Freeze

COMPLETE

Authentication Services only

Authentication Services

DONE

Credential & SSSD Federation

AuthZ-enabled MDSAL

DONE

AuthZ-enabled MD-SAL

Access Policy

DONE

AuthZ policy CRUD

AuthZ Services

Deferred

AuthZ service to enforce access policies

Documentation review

Documentation update

Integration testing

Execution of & Participation in continuous integration tests (IT)

Bugfixing

Fixing bugs/issues found during IT

Release Review

Release Review

AA Release

Pluggable, out-of-the-box token-based AuthN and MD-SAL AuthZ app-specific AuthZ