Security Model

Admin

There is only one admin available in the system. He's credentials are stored in a property file. A new project can be created by admin only as well as granting initial permissions on it.

Projects By Groups model

Every project configuration has a list of groups that are allowed to view and edit the project. The list of groups is provided by AuthProvider.

If the user is in the group - he has an access to the project (he can see it in projects list), hew can get any entity (testcase, testsuite, testrun) via UI or via API, he can change testcases, perform test runs, save testsuites and configure the project.

In nearest future the mechanism will be more sophisticated - project admin groups and personal (by-user) permissions will be added.