search

prplfoundation / prpl-ssi-api

prpl Foundation Software Stack Independent API schema
1 stars 0 forks source link

User.Roles.{RoleId}.ACL.Rules: ServiceId field possible value update #13

Open PauloJorgeAltran opened 5 years ago

PauloJorgeAltran commented 5 years ago

Currently the possible values are "valid objects". The object should have the path specified for parsing. On a high level definition this should be updated to: valid "Services.Management.{Id}" object. However, ALTRAN proposal will be to define which specific Management Services are allowed for this "service". Possible Values should be: "Services.Management.CWMP", "Services.Management.CLI", "Services.Management.WUI" objects. Nevertheless, CWMP Service needs to be discussed, since from the this is a protected service and the configuration should be somehow restricted. ALTRAN does not see a use-case to have the ACL Rules for the CWMP Service.

jrmfreitas88 commented 5 years ago

Hi Paulo,

Thanks for sharing your inputs. We understand the motivation for having a fixed set of possible values, or in other words an Enumeration.

However, it becomes difficult to fulfil this request without having to compromise the ability to support upcoming new services (or even proprietary), or force the User.Roles Manager service to be updated as a side-effect.

Nevertheless, in aid of narrowing down the possible values of the “ServiceId” field, the specification will be updated to enforce the validation of the “Services.” prefix.