CZERTAINLY 2.5.0 with updated access control and permissions

[3keyroman]

CZERTAINLY 2.5.0

We are happy to announce that CZERTAINLY version 2.5.0 has been released!

This release brings major changes to access control and updated to the platform connectors.

New design of access control

CZERTAINLY decouples the identification, authentication, and authorization process and therefore provides flexibility in terms of configuration access control rules.

The following steps are generally applied when user should be identified, authenticated, and authorized:

1. User is authenticated using external authentication system. The identification of authenticated user is forwarded to the platform.
2. CZERTAINLY Auth Service validates the identification of the user and search for the user in the database.
3. When user is found, internal authorization token is produced containing all permissions that are assigned to the user according the role definition.
4. The authorization token is used by internal services to evaluate authorization of the user to actions and related objects using OPA.

The access control consists of the following parts:

Access Control Part	Short description
Externalized Authentication	External authentication system support
Identification	Supported identification options
Authorization	Authorization policies and evaluation process
Users	User management
Roles and Permissions	Management of roles and permissions

Access control requirements for Core

Core access control requires the following to run:

• CZERTAINLY-Auth service to manage users, roles, permission.
• OPA (Open Policy Agent) evaluating policies and providing decisions about authorization.
• OPA policies bundles that are loaded into OPA service and define the rules to be evaluated. The policies are defined in CZERTAINLY-Auth-OPA-Policies

Updated components

The following component were created or updated as part of this release:

• CZERTAINLY-Interfaces
• CZERTAINLY-Core
• CZERTAINLY-Auth
• CZERTAINLY-Auth-OPA-Policies
• CZERTAINLY-FE-Administrator
• CZERTAINLY-Keystore-Entity-Provider
• CZERTAINLY-MS-ADCS-Connector

Additional information

You can read the full change log here: CZERTAINLY-Core-2.5.0

With this release we have updated available connector to support all new features.

Visit the our website or official documentation to learn more about CZERTAINLY!

Read more about the access control concept here: CZERTAINLY Access Control Overview