[Auth Service] Security Model for OVE

[senakafdo]

Must support access control of key functions (including APIs and UIs)

[davidbirchwork]

This Security Model should consider the use of the Asset Manager and the Object Store

[oserban]

Happy to contribute to this

[senakafdo]

This is no longer required as this functionality is provided by the AM.

[jamesscottbrown]

The AM provides access control for the assets it contains, but there is still no access control for the OVE APIs (e.g., anyone can delete existing sections or open new ones with no authentication), so I don't think this issue is fully resolved yet.