Versions Compared

Old Version 19

changes.mady.by.user Pavel Paroulek

Saved on

compared with

New Version 20

changes.mady.by.user Pavel Paroulek

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. The request is authenticated in AAFTODO: the request should be authorized in the
  2. futureThe request is authorized through a permission in AAF (see section: A&AI permissions)
  3. If the request passes all the checks (authentication and in the future authorization), it is forwarded to the A&AI servlet which handles the web services.

...

Users have roles assigned and each role has permissions.

A&AI permissions

...

There will be a separate permission for traversal and resources web services. Let's call these permissions org.onap.aai.resources and org.onap.aai.traversal. For now we will not distinguish between different objects we could affect, so the instance will always be "*" meaning everything. Actions will be mapped to HTTP verbs - GET, PUT, POST, DELETE, PATCH.

...