Verschärftes Rechte- und Rollenkonzept

[BrittaTSI]

gem. Gespräch TSI Security/Datenschutz/Dev, 03.05.2021 / Differenzierung der Rechte je im PoC ausgeführter Rolle -> Wer darf eingeben, wer darf ausdrucken, wer darf speichern

https://miro.com/app/board/o9J_lOjvz8M=/?moveToWidget=3074457356491331127&cot=14

[Ein-Tim]

Is this really an issue for the documentation repository? If yes could you please further elaborate it?

Thank you!

[BrittaTSI]

It is a requirement of our Security and Privacy colleagues that we have to provide more details in our role and authorization concept.
The concept is a mandatory deliverable in the Telekom's Privacy & Security Asssement process (part of the SDSK) but we were asked to track this issue separately because of its importance.
Documentation seemed to me the most appropriate repository for this issue. What do you think?

[Ein-Tim]

@BrittaTSI Thank you for elaborating! Yes, in this case I agree that it can stay in this repository!

[BrittaTSI]

@Ein-Tim
P.S. Same holds for https://github.com/corona-warn-app/cwa-documentation/issues/617, please see my comments there.

[Ein-Tim]

@BrittaTSI Thank you! And also thank you for tracking this issue transparently here!

[MikeMcC399]

@BrittaTSI
Is there a document published in this repository which defines the role and authorization concept you refer to? You write that you (TSI?) have to provide more details there, so it only makes sense to have this issue here in this repository if the document is also posted here, or would be posted here at a later date.

If, on the other hand, the document is an internal document, then perhaps the issue is better listed in one of your internal systems which isn't visible to the Internet community.

[BrittaTSI]

@MikeMcC399
You have a point here.
The document itself is indeed Telekom-internal. I will try to find another reposistory to move it to.
The topic is of course documentation but I do not want to confuse non-Telekom collaborators with our internal stuff.

[BrittaTSI]

Vermutung - Anforderung ist mittlerweile obsolet.