Research: Access control models for case-level OSINT data #52

New issue

Closed

opened 2026-05-13 23:52:15 +00:00 by Mark · 1 comment

Mark commented

2026-05-13 23:52:15 +00:00

Owner

Research and evaluate access control approaches suitable for osint-hub. When complete, report findings back on issue osint-hub#36.

Scope

Survey case-level permission models: owner-only, owner+collaborators, RBAC, ACLs
Evaluate Forgejo/Gitea permission primitives if reused
Check existing osint-hub user model and authentication layer
Consider read vs write vs admin tiers per case
Identify integration points in the current codebase
Look at similar OSINT tools for patterns (Maltego, Recon-ng, etc.)

Deliverable

A written recommendation on which access control model to use, how it integrates with the existing user/auth system, and estimated complexity.

Post-Completion

Comment on osint-hub#36 with findings and a link to this issue.

Blocks

osint-hub#36 - No case-level access control

Research and evaluate access control approaches suitable for osint-hub. When complete, report findings back on issue osint-hub#36. ## Scope - Survey case-level permission models: owner-only, owner+collaborators, RBAC, ACLs - Evaluate Forgejo/Gitea permission primitives if reused - Check existing osint-hub user model and authentication layer - Consider read vs write vs admin tiers per case - Identify integration points in the current codebase - Look at similar OSINT tools for patterns (Maltego, Recon-ng, etc.) ## Deliverable A written recommendation on which access control model to use, how it integrates with the existing user/auth system, and estimated complexity. ## Post-Completion Comment on osint-hub#36 with findings and a link to this issue. ## Blocks osint-hub#36 - No case-level access control