Yes 1.7. The docs are still under construction and not publicly available. Basically at the time of creating the API, you will be able to define scopes for an API and associate user roles for the scopes. You can then assign a scope to a particular resource. Which would indirectly mean that you assign a role for a resource. At the time of requesting a token, you provide the list of scopes that you require. The token that you get, will only bear the scopes that you are permitted to access. Meaning that you will not be able to use that token for accessing resources that you are not permitted to.
Thanks, NuwanD. On Tue, May 20, 2014 at 4:47 PM, Dmitry Sotnikov <[email protected]> wrote: > "Upcoming" meaning 1.7 that's coming soon? > > Is there documentation describing how to set up this resource-level access > by roles with the scopes? > > Dmitry > > > On Tue, May 20, 2014 at 4:37 PM, Nuwan Dias <[email protected]> wrote: > >> Hi Dimitry, >> >> No, right now we do not have this support. But in the upcoming release of >> the API Manager this would be possible with the introduction of scopes >> (OAuth2). >> >> Thanks, >> NuwanD. >> >> >> On Tue, May 20, 2014 at 4:01 PM, Dmitry Sotnikov <[email protected]> wrote: >> >>> Is there a way within API Manager to do resource-level permissions? >>> >>> For example, for a particular resource users from one role can only do >>> GET, and from another also have POST? >>> >>> I found a way to assign the whole API to a role, but not individual >>> resources. For resources, as far as I understand, I can only set max tier >>> and level of authentication. >>> >>> Is there a way to achieve this selective verb access based on user role? >>> >>> -- >>> Dmitry Sotnikov >>> VP of Cloud; WSO2, Inc.; http://wso2.com/ >>> email: [email protected]; cell: +1.949.303.9653; Skype: DSotnikov >>> Lean . Enterprise . Middleware >>> >>> <http://wso2.com/events/> >>> >> >> >> >> -- >> Nuwan Dias >> >> Associate Tech Lead - WSO2, Inc. http://wso2.com >> email : [email protected] >> Phone : +94 777 775 729 >> > > > > -- > Dmitry Sotnikov > VP of Cloud; WSO2, Inc.; http://wso2.com/ > email: [email protected]; cell: +1.949.303.9653; Skype: DSotnikov > Lean . Enterprise . Middleware > > <http://wso2.com/events/> > -- Nuwan Dias Associate Tech Lead - WSO2, Inc. http://wso2.com email : [email protected] Phone : +94 777 775 729
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
