...
- As illustrated in the above access flow, the access checks get invoked when the resource Ids in the API Cmd are annotated.
- Thus we will have to edit all existing API Cmds and add the relevant @ACL annotation on the primary resource Ids the command operates on.
- For any other resources that the command works with, the current access checks placed in the service layer will invoke the SecurityChecker.
- These current access checks pass the AccessType whereever needed or mostly pass null. Our SecurityChecker will interpret null as a 'ReadUseEntry' access. In the 'acl_permission' schema, all List* APIs will be marked as 'ReadUseEntry' AccessType entries to facilitate this access check.
...
{"serverDuration": 130, "requestCorrelationId": "b033406aee754ae8"}