authorization

Phrase I: Simple authentication (Done)

　　Authentication supported by logging in the Kimchi with user and user password from the client. And the client is authenticated with the user.

Phrase II: Simple role based authorization

　　Two roles will be defined. One is the administrator role and the other is the normal user. The administrator can do everything including VM lifecycle management, network and storage lifecycle management. The normal user can only view the VMs, network and storage, while it can not delete or update them.

Phrase III: Customized role based authorization.

　　All of the operations can be defined into various groups with permissions defined. And the permissions of one role can be defined by the administrator.