Thanks a lot Nuwan! Dmitry
On Tue, May 20, 2014 at 5:05 PM, Nuwan Dias <[email protected]> wrote: > Yes 1.7. > > The docs are still under construction and not publicly available. > Basically at the time of creating the API, you will be able to define > scopes for an API and associate user roles for the scopes. You can then > assign a scope to a particular resource. Which would indirectly mean that > you assign a role for a resource. At the time of requesting a token, you > provide the list of scopes that you require. The token that you get, will > only bear the scopes that you are permitted to access. Meaning that you > will not be able to use that token for accessing resources that you are not > permitted to. > > Thanks, > NuwanD. > > > On Tue, May 20, 2014 at 4:47 PM, Dmitry Sotnikov <[email protected]> wrote: > >> "Upcoming" meaning 1.7 that's coming soon? >> >> Is there documentation describing how to set up this resource-level >> access by roles with the scopes? >> >> Dmitry >> >> >> On Tue, May 20, 2014 at 4:37 PM, Nuwan Dias <[email protected]> wrote: >> >>> Hi Dimitry, >>> >>> No, right now we do not have this support. But in the upcoming release >>> of the API Manager this would be possible with the introduction of scopes >>> (OAuth2). >>> >>> Thanks, >>> NuwanD. >>> >>> >>> On Tue, May 20, 2014 at 4:01 PM, Dmitry Sotnikov <[email protected]>wrote: >>> >>>> Is there a way within API Manager to do resource-level permissions? >>>> >>>> For example, for a particular resource users from one role can only do >>>> GET, and from another also have POST? >>>> >>>> I found a way to assign the whole API to a role, but not individual >>>> resources. For resources, as far as I understand, I can only set max tier >>>> and level of authentication. >>>> >>>> Is there a way to achieve this selective verb access based on user role? >>>> >>>> -- >>>> Dmitry Sotnikov >>>> VP of Cloud; WSO2, Inc.; http://wso2.com/ >>>> email: [email protected]; cell: +1.949.303.9653; Skype: DSotnikov >>>> Lean . Enterprise . Middleware >>>> >>>> <http://wso2.com/events/> >>>> >>> >>> >>> >>> -- >>> Nuwan Dias >>> >>> Associate Tech Lead - WSO2, Inc. http://wso2.com >>> email : [email protected] >>> Phone : +94 777 775 729 >>> >> >> >> >> -- >> Dmitry Sotnikov >> VP of Cloud; WSO2, Inc.; http://wso2.com/ >> email: [email protected]; cell: +1.949.303.9653; Skype: DSotnikov >> Lean . Enterprise . Middleware >> >> <http://wso2.com/events/> >> > > > > -- > Nuwan Dias > > Associate Tech Lead - WSO2, Inc. http://wso2.com > email : [email protected] > Phone : +94 777 775 729 > -- Dmitry Sotnikov VP of Cloud; WSO2, Inc.; http://wso2.com/ email: [email protected]; cell: +1.949.303.9653; Skype: DSotnikov Lean . Enterprise . Middleware <http://wso2.com/events/>
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
