[
https://issues.apache.org/jira/browse/SCB-1341?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
liubao updated SCB-1341:
------------------------
Parent: (was: SCB-1293)
Issue Type: New Feature (was: Sub-task)
> support layered roles configuration
> -----------------------------------
>
> Key: SCB-1341
> URL: https://issues.apache.org/jira/browse/SCB-1341
> Project: Apache ServiceComb
> Issue Type: New Feature
> Components: Fence
> Reporter: liubao
> Assignee: liubao
> Priority: Major
>
> If ROLE_ADMIN and ROLE_USER contains ROLE_COMMON, and a method can be
> accessed with ROLE_COMMON, when token has only ROLE_USER, the access is
> granted.
>
> for authentication server:
> # can send as less information as possible
> for resource server:
> # can validate by role layer
>
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
