[security-dev] IDM: REST API

Shane Bryzak sbryzak at redhat.com
Mon Dec 10 17:34:41 EST 2012


On 12/11/2012 05:18 AM, Bill Burke wrote:
>
> On 12/10/2012 1:47 PM, Darran Lofthouse wrote:
>> On 12/10/2012 06:37 PM, Bill Burke wrote:
>>> * Granting specific access to somebody so they can act on behalf of you
>>> seems like a pretty compelling cross-cutting use case that should be
>>> supported in the model.
>> That is something that is coming up for AS7 as well we are close to the
>> point where we need to define which users can act on the behalf of other
>> users.
>>
> (I said this before).  In my prototype, i have something like a role
> mapping, but it is a list of roles a user is allowed to ask another user
> to grant for them.  This is the change in the meta model I'd need for
> this type of data, otherwise, i'm just hacking the identity model.
>
>
I'm going to need a way more descriptive use case than this to ensure 
that we're addressing this requirement.  Bill, would you mind writing 
something up that includes all the details plus a real life scenario?


More information about the security-dev mailing list