Make carbon mgt console & soap services disabled by default

[darshanasbg]

Is your suggestion related to an experience ? Please describe. Carbon Management Console has been deprecated with IS 7.0.0 https://is.docs.wso2.com/en/latest/references/about-this-release/#deprecated-features

SOAP Services has been deprecated since IS 6.0.0 https://is.docs.wso2.com/en/6.1.0/references/about-this-release/#deprecated-features

As the first step retiring these functionality, its better to disable these two in the default pack.

Describe the improvement Have soap services and the carbon management console not accessible in the default pack.

Need to consider giving a feature flag to enable soap services to keep the backward compatibility for anyone who is migrating from an old version.

Additional context Fully retiring these features would possibly be done with next major IS version.

[janakamarasena]

Would be good if soap services can be selectively enabled so anyone can enable only the ones they require.

[darshanasbg]

Would be good if soap services can be selectively enabled so anyone can enable only the ones they require.

Yeah.. We can consider that..

[shashimalcse]

Identified a couple of SOAP services used in IS7 management console features related to API access management and authroization. Giving a feature flag to enable these features would be ideal.

• Entitlement (XACML)
  • EntitlementAdminService (PDP Configurations)
  • EntitlementService (PDP Endpoint)
  • EntitlementPolicyAdminService (PAP)
• Roles List (Managing permissions of old roles. mail : Revamping Management Console in IS 7.0.0 )
  • UserAdmin (role management)
• Consent Purpose (Don't know the exact SOAP service used for this)

The following are some SOAP services not used in the console (We can disable these for the default pack):

• OAuth2TokenValidationService (token validation)
• ServerRolesManager (manage server roles)
• OAuthAdminService (manage oauth apps)
• IdentityApplicationManagementService (application mgt)
• ResourceAdminService

[darshanasbg]

Thanks for the analysis @shashimalcse..

IMO, we should not ask to access management console or soap services for any features that are not deprecated in the product.. We should have corresponding REST APIs and new UIs to use them..

We may allow selective access to soap services, considering the backward compatibility of the legacy deprecated features.. But that should be only used for that purpose..

[shashimalcse]

@darshanasbg agree! there is an effort ongoing with XACML REST APIs and the new console UI. Let's track those.