Hi Randilu, How do you prevent, User A export User B's applications?
On Mon, Nov 20, 2017 at 6:06 PM, Randilu Soysa <[email protected]> wrote: > Hi Krishan, > > The feature supports non admin users as well, any user with the exported > zip file within the apim subscribe scope can import the application to any > environment. > > > On Mon, Nov 20, 2017 at 12:05 PM, Krishan Wijesena <[email protected]> > wrote: > >> Hi Randilu, >> >>> >>> On Tue, Nov 14, 2017 at 4:56 PM, Randilu Soysa <[email protected]> wrote: >>> >>>> Hi, >>>> >>>> >>>> Im working on Application Import Export feature for APIM 3.0.0 in order >>>> to migrate an application to different environments. Two REST endpoints >>>> were implemented to export an application from one environment which could >>>> be imported to another environment in return to create a particular >>>> application. >>>> >>>> >>>> The implementation for this feature is as follows, >>>> >>>> >>>> >>>> 1. >>>> >>>> REST api to export an application >>>> >>>> Exports a prevailing application as a zip file which can be saved to a >>>> desired location. >>>> >>>> >>>> Sample request: GET https://localhost:9292/api/am/ >>>> store/v1.0/export/applications?appId=xxx >>>> >>>> Headers Authorization: Bearer ae4eae22-3f65-387b-a171-d37eaa366fa8 >>>> >>>> >>>> >>>> 1. >>>> >>>> REST api to import an application >>>> >>>> Imports an application from an exported archive file. >>>> >>>> Sample request: POST https://localhost:9292/api/am/ >>>> store/v1.0/import/applications >>>> >>>> Headers Authorization: Bearer ae4eae22-3f65-387b-a171-d37eaa366fa8 >>>> >>>> >>>> >>>> >>>> Need suggestions, >>>> >>>> 1. >>>> >>>> To come up with a suitable method name to extract application >>>> details from the imported file [1]. >>>> 2. >>>> >>>> To find out file permission issues which may occur while >>>> write/delete to/from a file, creating directories and getting tmp >>>> directory >>>> path in different platforms including Windows and Mac OS. >>>> >>>> >>>> [1]https://github.com/randilu/carbon-apimgt/blob/importExpor >>>> tAppsFeature/components/apimgt/org.wso2.carbon.apimgt.rest.a >>>> pi.store/src/main/java/org/wso2/carbon/apimgt/rest/api/store >>>> /utils/FileBasedApplicationImportExportManager.java >>>> >>>> >>>> Appreciate your feedback! >>>> >>>> >>>> How about the permission for the REST API is hanndled. Does this >>> import/export feature only supports for admin role or does it going to >>> support for the non admin users as well? >>> >> >> I think this should support for non admin users as well, then this >> should check the aplication created user when it export to different >> environment. >> is this support for any user to export application to any >> environment or permission needed for that? >> >> >>> >>> -- >>> *Randilu Soysa* >>> Software Engineering Intern | WSO2 >>> >>> Email : [email protected] >>> Mobile : +94 77 197 5078 <+94%2077%20197%205078> >>> linkedin : linkedin.com/in/randilusoysa >>> Web : http://wso2.com >>> >>> <http://wso2.com/signature> >>> >>>> >>>> _______________________________________________ >>>> Architecture mailing list >>>> [email protected] >>>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture >>>> >>>> >>> >>> _______________________________________________ >>> Architecture mailing list >>> [email protected] >>> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture >>> >>> >> >> >> -- >> >> *Krishan Wijesena* >> Software Engineer | WSO2 >> >> Email : [email protected] >> Mobile : +94776219923 <+94%2077%20621%209923> >> WSO2 Inc : http://wso2.com >> [image: http://wso2.com/signature] <http://wso2.com/signature> >> >> _______________________________________________ >> Architecture mailing list >> [email protected] >> https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture >> >> > > > -- > *Randilu Soysa* > Software Engineering Intern | WSO2 > > Email : [email protected] > Mobile : +94 77 197 5078 <+94%2077%20197%205078> > linkedin : linkedin.com/in/randilusoysa > Web : http://wso2.com > > <http://wso2.com/signature> > > _______________________________________________ > Architecture mailing list > [email protected] > https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture > >
_______________________________________________ Architecture mailing list [email protected] https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture
