[ 
https://issues.apache.org/jira/browse/SLING-3315?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13869828#comment-13869828
 ] 

Marius Petria commented on SLING-3315:
--------------------------------------

It is possible do all CRUD operations and listings can be done via 
/apps/system/config.author.1.json. 

I believe that the main issue remains security. One can probably put all 
configs related to replication in a dedicated folder like 
/apps/system/config/replication and control the access to that folder. However 
it remains the issue the user that has access to the folder can in fact upload 
any configuration file, even for services unrelated to replication.

> Refactor replication HTTP API
> -----------------------------
>
>                 Key: SLING-3315
>                 URL: https://issues.apache.org/jira/browse/SLING-3315
>             Project: Sling
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: Marius Petria
>              Labels: replication
>         Attachments: SLING-3315.patch
>
>
> Refactor HTTP API in order to access independently the configuration of an 
> agent and the service API for an agent. This was needed because there are 
> times when a configuration can exist without an agent being available (e.g. 
> when the agent is not disabled).
> Proposed API:
> Managing configuration
> POST     /system/replication/config/agent (creates and agent cofig)
> GET       /system/replication/config/agent (retrieves all agents config)
> POST     /system/replication/config/agent/{agentName} (updates and agent)
> GET       /system/replication/config/agent/{agentName} (retrieves the agent 
> config)
> DELETE /system/replication/config/agent/{agentName} (deletes an agent config)
> Managing agent
> POST     /system/replication/config/agent/{agentName} (schedules a package 
> for replication or removes one from the queue)
> GET     /system/replication/config/agent/{agentName}/queue (lists the 
> packages in the queue)



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to