Define Authentication/Authorization model.

[joerg84]

No description provided.

[rajivsam]

1. What does Arango UI use for authentication and authorization? Can we reuse that? If we could we probably have some in house experts who are familiar with it.
2. Should we investigate an api like ambassador for this? (https://www.getambassador.io/user-guide/auth-tutorial/) or perhaps an OAuth2 provider?
3. Defining the different roles and a mapping of roles to arangopipe API must be done. For the MVP, we could go with:

• Data Scientist
• Date Engineer
• Application Administrator

[joerg84]

User Stories:

• [optional ]Dan, the data scientist, wants to share meta-data about his projects with some colleagues but not all.
• [MVP] Jim, a Arangopipe admimistrator, needs to provision projects to be tracked by Arangopipe.
• [Optional] John, a data engineer, wants to share meta-data about his projects with some colleagues but not all.
• John, the data engineer, develops some feature set generating pipelines. He wants to make sure that only he or some of his colleagues can log metadata information about these pipelines with Arangopipe.
• Dan, the data scientist, develops some modeling pipelines. These pipelines will create machine learning metadata like model parameters and model hyper-parameters. He wants to make sure that only he or some of his colleagues can log metadata generated by modeling pipeline execution with Arangopipe.
• Harvey, the dev-ops engineer often needs details about feature set or modelling pipelines. He is not going to be creating meta-data, he just needs to view them when he needs the information.
• [MVP] Jim needs to provision users like Dan, John or Harvey into Arangopipe.

MVP
Private/Public
Roles: Admin, Data Engineer, Data Scientist
At MVP no further distinction between individuals inside a role

Note: The following talk seems to give one example of how data scientists could collaborate
https://www.youtube.com/watch?v=kExwqij11cg