You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the sections below, the organization role `account-admin` is referred to as Account Admin.
35
+
34
36
### Access inheritance
35
37
36
38
Access is rooted at the organization level.
@@ -40,7 +42,7 @@ To do anything in Shopware PaaS, a user must first be a member of the organizati
40
42
The inheritance model works from broader scope to narrower scope:
41
43
42
44
* an organization membership is the baseline for any further access
43
-
* an organization admin can also manage project- and application-level access within that organization
45
+
* an Account Admin can also manage project- and application-level access within that organization
44
46
* a project admin also has the effective permissions needed at application level within that project
45
47
46
48
This means access becomes more specific as you move from organization to project to application, but it always starts with the organization.
@@ -75,8 +77,8 @@ Human users are managed through `account user`. These commands are used to inspe
75
77
76
78
In practice, there are two common ways to grant human access:
77
79
78
-
***Direct grant:** an existing account admin grants a membership directly with `sw-paas account user add`
79
-
***Access request:** a user requests access themselves with `sw-paas account user request`, and an organization admin later approves or denies that request
80
+
***Direct grant:** an existing Account Admin grants a membership directly with `sw-paas account user add`
81
+
***Access request:** a user requests access themselves with `sw-paas account user request`, and an Account Admin later approves or denies that request
80
82
81
83
The direct grant flow is useful when an admin already knows which user should get which role. The request flow is useful when users need to ask for access to an organization, project, or application on their own.
82
84
@@ -139,7 +141,7 @@ This is the usual flow:
139
141
140
142
1. A user creates a request for organization-, project-, or application-level access.
141
143
2. The request stays in `pending` state until it is reviewed.
142
-
3. An organization admin approves or denies the request.
144
+
3. An Account Admin approves or denies the request.
143
145
4. If approved, the membership is created with the requested role.
144
146
5. If denied, no membership is created.
145
147
@@ -157,13 +159,13 @@ List your own requests:
157
159
sw-paas account user requests list
158
160
```
159
161
160
-
Organization admins can list requests for an organization with:
162
+
Account Admins can list requests for an organization with:
161
163
162
164
```sh
163
165
sw-paas account user requests list --admin --organization-id <organization-id>
164
166
```
165
167
166
-
Organization admins can then approve or deny a pending request:
168
+
Account Admins can then approve or deny a pending request:
Copy file name to clipboardExpand all lines: products/paas/shopware-paas/index.md
+3-7Lines changed: 3 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -65,13 +65,9 @@ git add .
65
65
git commit -am "initial commit"
66
66
```
67
67
68
-
7.) Configure the PaaS CLI with your project_id
68
+
7.) Configure the Git remote for your project_id
69
69
70
-
```sh
71
-
shopware project:set-remote PROJECT_ID
72
-
```
73
-
74
-
Where PROJECT_ID is the project_id of your empty project.
70
+
Follow the [repository setup guide](repository) to connect your local Git repository to your empty Shopware PaaS project.
75
71
76
72
8.) Push the code to Shopware PaaS
77
73
@@ -84,7 +80,7 @@ git push shopware
84
80
The sub-pages describe a more detailed step-by-step guide that you can follow to set up your PaaS project.
85
81
86
82
First, make sure your [PaaS CLI is set up correctly](cli-setup).
87
-
Once you can authenticate with the CLI, review [account](account) to inspect your own access, manage user memberships, and configure service accounts for automation.
83
+
Once you can authenticate with the CLI, review [Account](account) to inspect your own access, manage user memberships, and configure service accounts for automation.
88
84
Once your PaaS CLI is up and running, it is time to [set up your project repository](repository).
89
85
90
86
When your repository is set up correctly, you are ready to [push and deploy your project](build-deploy) to the PaaS environment.
0 commit comments