RBAC M1: RBAC System Architecture Design

[MaferMazu]

This milestone establishes the foundational architecture for the Roles and Permissions system in Open edX. It includes both evaluating and selecting the right technology stack and defining an implementation strategy. The scope and effort will depend on the complexity discovered during the spike.

Deliverables:

Architectural Strategy & Design

• Technical Architecture Document + ADRs
  • RBAC: Technical Design Document: AuthZ Architecture Approach #18
  • ADR: Purpose of this repo #19
  • ADR: Foundational Authorization model #33
  • ADR: Chosen Technology #21
  • ADR: Compatibility scheme with the current system (Gradual migration strategy) #20
  • ADR: AuthZ connection between the authorization and authentication system through JWT #29
• Q&A document on architectural decisions
• Architecture diagrams and integration flows

Technology risk management

• Technology evaluation and enforcement strategies
• Risk assessment and validation plan (e.g., tests, POCs)

Migration planning

• Proposed migration strategy for Libraries MVP

[MaferMazu]

@gviedma-aulasneo I divided this milestone into three groups of deliverables, and the issues you created before I added to #25.