[address-policy-wg] delegate LIR portal access to specific user for specific resources - was: 2023-02 New Policy Proposal (Minimum Size for IPv4 Temporary Assignments)

Heho,

Answering as i just use[d] this.

> Can you explain this better? I have been asking to several ncc
> contacts and there was no suitable solution for this at the moment.
> 
> Asking researchers/developers to create their own LIRs so that
> resources can be transferred is not a practical solution, but I'm not
> sure you are referring to this. Giving the researcher/developer
> access to the LIR portal/APIs for all the resources is also not a
> solution.

The researchers just need a MNT object on an account they can create
(and likely already have for Atlas), which does not have to be an LIR.
The LIR then just does an 'ALLOCATED-BY-LIR' with the researchers' MNT
as MNT-BY. Should then just show up under 'your resources', iirc. RPKI,
of course, still has to be set by the LIR.

This is not much different than what is happening with a tmp. PI
assignment; There, the LIR will have MNT-BY on the resource (as well as
the end-user who requested it, i.e., the researchers). As said, the
only thing missing there is being able to set RPKI oneself. The rest
should work (barring DNS of parent zones already exist in the DB).

If you send me a MNT-BY/ORG/ROLE set, we can also quickly test this by
me making a temporary allocation for testing.

With best regards,
Tobias

-- 
Dr.-Ing. Tobias Fiebig
T +31 616 80 98 99
M tobias at fiebig.nl