1. Overview
Microservice containing the business logic for managing security-administration-app-service.
1.2. Tags
-
access-control-service-controller : Access Control Service Controller
-
all-resource-controller : All Resource Controller
-
privilege-controller : Privilege Controller
-
role-controller : Role Controller
-
scopes-controller : Scopes Controller
-
security-assignment-controller : Security Assignment Controller
-
user-settings-controller : User Settings Controller
2. Resources
2.1. Access-control-service-controller
Access Control Service Controller
2.1.1. Add Members To Uaa Group
POST /access-control-viewer
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
object |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.2. Get identity providers list
GET /access-control-viewer/config/identity-providers
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.3. Get Assignments of a group
GET /access-control-viewer/group/assignments
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.4. Create Uaa Group
POST /access-control-viewer/groups
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
object |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
409 |
Conflict - Group name conflict |
|
500 |
Internal Server error |
2.1.5. Get All Groups
GET /access-control-viewer/groups
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
< GroupInfo > array |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.6. Get All Members
GET /access-control-viewer/members
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Query |
groupId |
UAA privilege id. |
string |
Query |
privilegeName |
UAA privilege name. |
string |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.7. Add Applications To Uaa Group
POST /access-control-viewer/{groupId}/applications
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
groupId |
groupId |
string |
Body |
uaaRequestList |
uaaRequestList |
< UaaGroupOrMemberRequest > array |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
object |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.8. Add group in assignment
PUT /access-control-viewer/{groupId}/assignment
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
groupId |
groupId |
string |
Query |
assignmentId |
assignmentId |
integer (int32) |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
424 |
Failed Dependency |
|
500 |
Internal Server error |
2.1.9. Remove group in assignment
DELETE /access-control-viewer/{groupId}/assignment
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
groupId |
groupId |
string |
Query |
assignmentId |
assignmentId |
integer (int32) |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
424 |
Failed Dependency |
|
500 |
Internal Server error |
2.1.10. Remove Member From Uaa Group
DELETE /access-control-viewer/{groupId}/member/{memberId}
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
groupId |
groupId |
string |
Path |
memberId |
memberId |
string |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.1.11. Add Members To Uaa Grouping
POST /access-control-viewer/{groupId}/members
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
groupId |
groupId |
string |
Body |
uaaRequest |
uaaRequest |
< UaaGroupOrMemberRequest > array |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
object |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.2. All-resource-controller
All Resource Controller
2.3. Privilege-controller
Privilege Controller
2.4. Role-controller
Role Controller
2.4.1. create role
POST /role
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.4.2. Get all roles
GET /role
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Query |
page |
Results page you want to retrieve (0..N) |
integer (int32) |
Query |
size |
Number of records per page. |
integer (int32) |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.4.3. Get all app level permissions
GET /role/apps
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
< AppLevelPermissionsResponse > array |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.4.4. Get all scopes
GET /role/scopes
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
< string > array |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.4.5. update role
PUT /role/{id}
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
id |
id |
integer (int32) |
Body |
updateRolesRequest |
updateRolesRequest |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.4.6. get role by id
GET /role/{roleId}
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.5. Scopes-controller
Scopes Controller
2.6. Security-assignment-controller
Security Assignment Controller
2.6.1. Create assignment
POST /assignment
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.6.2. Get all assignment
GET /assignment
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Query |
page |
Results page you want to retrieve (0..N) |
integer (int32) |
Query |
size |
Number of records per page. |
integer (int32) |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
< AssignmentsSearchResponseResult > array |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.6.3. updateAssignmentsWithGroupId
PUT /assignment/group/{groupId}
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
groupId |
groupId |
string |
Body |
assignmentIds |
assignmentIds |
< integer (int32) > array |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
object |
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.6.4. Get assignment by id
GET /assignment/{id}
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.6.5. Update assignment
PUT /assignment/{id}
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Path |
id |
id |
integer (int32) |
Body |
assignmentsUpdateRequest |
assignmentsUpdateRequest |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Bad Request |
|
401 |
Unauthorized |
|
404 |
Not Found |
|
500 |
Internal Server error |
2.7. User-settings-controller
User Settings Controller
2.7.1. Create User settings for the logged in user
POST /v2/settings
Responses
HTTP Code | Description | Schema |
---|---|---|
201 |
Created |
|
204 |
No Content, Error retrieving created user settings |
|
400 |
Invalid data supplied |
|
401 |
User Unauthorized |
No Content |
404 |
App ID not found in privilege set |
|
409 |
Conflict, User Setting already exists. Use a PUT to update |
|
500 |
Internal Server Error |
2.7.2. Get User settings for the logged in User
GET /v2/settings
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Query |
appId |
appId |
integer (int32) |
Query |
viewName |
viewName |
string |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Invalid data supplied |
|
401 |
User Unauthorized |
No Content |
404 |
Not found, no user setting found for the user |
|
500 |
Internal Server Error |
2.7.3. Update User settings for the logged in user
PUT /v2/settings
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
|
400 |
Invalid data supplied |
|
401 |
User Unauthorized |
No Content |
404 |
Not Found, There is no saved User settings for the logged in user |
|
500 |
Internal Server Error |
2.7.4. Delete User settings for the logged in user
DELETE /v2/settings
Parameters
Type | Name | Description | Schema |
---|---|---|---|
Query |
appId |
appId |
integer (int32) |
Query |
viewName |
viewName |
string |
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
object |
204 |
Success |
object |
400 |
Invalid data supplied |
|
401 |
User Unauthorized |
No Content |
404 |
Not Found, User Setting not found |
|
500 |
Internal Server Error |
2.7.5. Get Privilege Sets
GET /v2/settings/apps
Responses
HTTP Code | Description | Schema |
---|---|---|
200 |
OK |
< PrivilegeSet > array |
400 |
Invalid data supplied |
|
401 |
User Unauthorized |
No Content |
404 |
Not found, no user setting found for the user |
|
500 |
Internal Server Error |
3. Definitions
3.1. AppLevelPermissionsResponse
Name | Description | Schema |
---|---|---|
description |
Application description |
string |
id |
Application id |
integer (int32) |
name |
Application name |
string |
permissionsDetailResponseList |
Permissions list with all information |
< PermissionDetailResponse > array |
3.2. AssignmentRequest
Name | Description | Schema |
---|---|---|
departmentIds |
department ids |
< integer (int32) > array |
description |
Description |
string |
groupIds |
User Group Name |
< string > array |
lineIds |
line ids |
< integer (int32) > array |
name |
Name |
string |
productFamilyIds |
product family ids |
< integer (int32) > array |
productIds |
product ids |
< integer (int32) > array |
roleIds |
role Ids |
< integer (int32) > array |
siteIds |
site ids |
< integer (int32) > array |
unitIds |
unit ids |
< integer (int32) > array |
3.3. AssignmentWithResourceResponse
Name | Description | Schema |
---|---|---|
departmentDetails |
Department Details |
< ResourceInfo > array |
description |
Description |
string |
groupDetails |
Group Details |
< GroupDetails > array |
id |
Id |
integer (int32) |
lineDetails |
Line Details |
< ResourceInfo > array |
name |
Name |
string |
productDetails |
Product Details |
< ResourceInfo > array |
productFamilyDetails |
Product Family Details |
< ResourceInfo > array |
roleDetails |
Role Details |
< ResourceInfo > array |
siteDetails |
Site Details |
< ResourceInfo > array |
unitDetails |
Unit Details |
< ResourceInfo > array |
3.4. AssignmentsResponse
Name | Description | Schema |
---|---|---|
createdBy |
string |
|
createdDate |
string (date-time) |
|
departmentIds |
department ids |
< integer (int32) > array |
description |
Description |
string |
groupDetails |
Group info |
< GroupDetails > array |
id |
Id |
integer (int32) |
lineIds |
line ids |
< integer (int32) > array |
modifiedBy |
string |
|
modifiedDate |
string (date-time) |
|
name |
Name |
string |
productFamilyIds |
product family ids |
< integer (int32) > array |
productIds |
product ids |
< integer (int32) > array |
roleIds |
role Ids |
< integer (int32) > array |
siteIds |
site ids |
< integer (int32) > array |
unitIds |
unit ids |
< integer (int32) > array |
3.5. AssignmentsSearchResponseResult
Name | Description | Schema |
---|---|---|
createdBy |
string |
|
createdDate |
Assignment creation date |
string (date-time) |
description |
AssignemntDescription |
string |
id |
Assignment id |
integer (int32) |
links |
< Link > array |
|
modifiedBy |
string |
|
modifiedDate |
Assignment modification date |
string (date-time) |
name |
Assignment name |
string |
3.6. CommonResponse
Name | Description | Schema |
---|---|---|
code |
Response code |
integer (int32) |
message |
Common response message |
string |
3.8. GroupDetails
Name | Description | Schema |
---|---|---|
displayName |
The unique displayName of the group |
string |
id |
The unique ID of the group |
string |
3.9. GroupInfo
Name | Description | Schema |
---|---|---|
description |
The description of the group |
string |
displayName |
The unique displayName of the group |
string |
id |
The unique ID of the group |
string |
members |
List of all members |
< object > array |
membersCount |
Members Count |
integer (int64) |
zoneId |
The unique displayName of the group |
string |
3.10. GroupMappingAssignmentResponse
Name | Description | Schema |
---|---|---|
assignmentDescription |
Assignment Description |
string |
assignmentId |
assignmentId |
integer (int32) |
assignmentName |
Assignment name |
string |
departmentIds |
Department Id |
< integer (int32) > array |
depts |
Dept Id |
< string > array |
groupIds |
Group Name |
< string > array |
lineIds |
Line Id |
< integer (int32) > array |
lines |
Line Id |
< string > array |
roleIds |
Role Ids |
< integer (int32) > array |
roleNames |
Role Name |
< string > array |
siteId |
Site Id |
integer (int32) |
siteNames |
Site Name |
string |
unitIds |
Unit Id |
< integer (int32) > array |
units |
Site Id |
< string > array |
3.13. Link
Name | Description | Schema |
---|---|---|
href |
string |
|
rel |
string |
|
templated |
Example : |
boolean |
3.14. Member
Name | Description | Schema |
---|---|---|
displayName |
Display name of the member |
|
id |
The unique ID of the member |
string |
memberCount |
Member Count |
integer (int64) |
name |
Name of the member |
string |
type |
Type of the member |
string |
3.15. PageMetadata
Name | Schema |
---|---|
number |
integer (int64) |
size |
integer (int64) |
totalElements |
integer (int64) |
totalPages |
integer (int64) |
3.16. PagedUsersListResult
Name | Schema |
---|---|
content |
< UsersListInfo > array |
links |
< Link > array |
page |
3.17. PermissionDetailResponse
Name | Description | Schema |
---|---|---|
description |
Permission description |
string |
id |
Permission Id |
integer (int32) |
name |
Permission name |
string |
scope |
Permission alias name |
string |
3.18. PrevilegeInfo
Name | Description | Schema |
---|---|---|
displayName |
display name |
string |
id |
previlege id |
string |
scope |
scope name |
string |
3.19. PrivilegeSet
Name | Schema |
---|---|
category |
string |
description |
string |
displayName |
string |
icon |
string |
id |
integer (int32) |
scope |
string |
3.21. RoleResponse
Name | Description | Schema |
---|---|---|
createdBy |
string |
|
createdDate |
Role Created Date |
string (date-time) |
description |
Role Description |
string |
id |
Role Id |
integer (int32) |
modifiedBy |
string |
|
modifiedDate |
string (date-time) |
|
name |
Role Name |
string |
permissions |
Collection of permissions |
< PermissionDetailResponse > array |
3.22. RoleSearchResponseResult
Name | Description | Schema |
---|---|---|
createdBy |
string |
|
createdDate |
Role Created Date |
string (date-time) |
description |
Role Description |
string |
id |
Role Id |
integer (int32) |
links |
< Link > array |
|
modifiedBy |
string |
|
modifiedDate |
string (date-time) |
|
name |
Role Name |
string |
3.23. RoleSearchResponseResults
Name | Schema |
---|---|
content |
< RoleSearchResponseResult > array |
links |
< Link > array |
page |
3.24. RolesRequest
Name | Description | Schema |
---|---|---|
description |
description |
string |
name |
name |
string |
permissionIds |
permission ids |
< integer (int32) > array |
3.25. UaaGroupOrMemberRequest
Name | Description | Schema |
---|---|---|
memberId |
Uaa member Id |
string |
type |
Uaa type Name |
string |
3.26. UaaGroupRequest
Name | Description | Schema |
---|---|---|
groupName |
Group Name |
string |
scopeName |
Uaa Scope Name |
string |
3.27. UserAndPrivilegeInfo
Name | Description | Schema |
---|---|---|
assignments |
assignments info |
< GroupMappingAssignmentResponse > array |
members |
member info |
< Member > array |
privileges |
privilege names |
< PrevilegeInfo > array |
3.28. UserName
Name | Description | Schema |
---|---|---|
familyName |
familyName |
string |
givenName |
givenName |
string |
3.29. UserSettingRequest
Name | Description | Schema |
---|---|---|
appId |
integer (int32) |
|
data |
The application specific settings, Eg:- 'App Name' : {'property1' : 'value' , 'property2' : 'value'} } |
object |
viewName |
string |
3.30. UserSettingResource
Name | Description | Schema |
---|---|---|
appId |
integer (int32) |
|
data |
object |
|
defaultSetting |
Example : |
boolean |
links |
< Link > array |
|
viewName |
string |
3.31. UsersListInfo
Name | Description | Schema |
---|---|---|
active |
The current status of the user |
boolean |
familyName |
familyName |
string |
givenName |
givenName |
string |
id |
The unique ID of the user |
string |
links |
< Link > array |
|
name |
The name of the user |
|
userId |
string |
|
userName |
The userName/login in of the user |
string |
4. Security
4.1. access_token
Type : oauth2
Flow : accessCode
Token URL : https://alpha2-pa/uaa/oauth/authorize
Token URL : https://alpha2-pa/uaa/oauth/token
Name | Description |
---|---|
default |
Default oauth2 scope. |
4.2. resource_owner
Type : oauth2
Flow : password
Token URL : https://alpha2-pa/uaa/oauth/token
Name | Description |
---|---|
default |
Default oauth2 scope. |
4.3. implicit_grant
Type : oauth2
Flow : implicit
Token URL : https://alpha2-pa/uaa/oauth/authorize
Name | Description |
---|---|
default |
Default oauth2 scope. |
4.4. client_creds
Type : oauth2
Flow : application
Token URL : https://alpha2-pa/uaa/oauth/token
Name | Description |
---|---|
default |
Default oauth2 scope. |