search

zowe / api-layer

The API Mediation Layer provides a single point of access for mainframe service REST APIs.
Eclipse Public License 2.0
54 stars 62 forks source link

Display ZLUX API catalog services according the SAF user profile #1660

Open GilPen opened 3 years ago

GilPen commented 3 years ago

Hello

Is it possible to prevent the display of z/OSMF services in ZLUX API ACATLOG for a standard user RACF group and to keep it for an admin RACF group ?

Thanks for your help.

Regards Gilles Peniguel

1000TurquoisePogs commented 3 years ago

I'm going to transfer this over to the api-layer repo because I think you mean the API Catalog App, correct? The display of what's possible should still disallow unprivileged users from actually making use of the APIs, but I'm not sure if the documentation that they exist can be hidden at this time. Hopefully the api-layer repo maintainers will know the answer.

balhar-jakub commented 3 years ago

@GilPen It isn't possible at the moment. Could you help us understand a bit more the use case you have in mind? So we can appropriately prioritize the issue.

Also if this topic is important to you, could you please thumbs-up the issue as this helps us to prioritize issues.

GilPen commented 3 years ago

Hello

We would like to display some services in the ZOWE swagger according their rights in th SAF.

For example, we write some personnal services for a standard user. The service use ZOSMF REST API. But we woulnd't like the user runs ZOSMF REST API directly from the swagger. We want to prevent some dangerous operations. So we would like ZOSMF API doesn' t appear in the swagger menu for the standard users.

But if you are a ZOWE admin, you need to see all services avaiable in the swagger.

Regards Gilles Peniguel

balhar-jakub commented 3 years ago

@GilPen Thanks for the clarification. I will change the question to an enhancement request. We will discuss the priority this Wednesday if you want to join.

In order to help us understand the priority of the issue, could you also add a Thumbs-up to the issue?