Re: Authorization for REST API

2011-12-16 Thread Ronny Roeller
;web", "", "", "1234", "", "", token.getExpiration()); } Ronny On Fri, Dec 16, 2011 at 2:16 PM, Ciancetta, Jesse E. wrote: > >-Original Message- > >From: Ronny Roeller [mailto:rroel...@gmail.com] > >Sent: Thursday, D

RE: Authorization for REST API

2011-12-16 Thread Matthew G Marum
--| |12/16/2011 08:17 AM | >-| |> | Subject: | |> >----------

RE: Authorization for REST API

2011-12-16 Thread Ciancetta, Jesse E.
>-Original Message- >From: Ronny Roeller [mailto:rroel...@gmail.com] >Sent: Thursday, December 15, 2011 6:04 PM >To: dev@shindig.apache.org >Subject: Authorization for REST API > >Hi, > >I want to add fine-granular authorization for calls to the REST API. For

Authorization for REST API

2011-12-15 Thread Ronny Roeller
Hi, I want to add fine-granular authorization for calls to the REST API. For example: a) users can read all fields of their own profile but only a subset of fields in other profiles, or b) only administrators are allowed to create new groups, etc. I thought of setting up Shiro after the Authentic