Service URL

https://authz.mapws.mit.edu

Service WSDL

https://authz.mapws.mit.edu/uaws/services/ua?wsdl

Security

This service requires client authentication. Applications wishing to use this service must obtain an application certificate. For more information on this process see: Application Certificate Documentation.

Applications must also be provisioned have access rights to the service. Requests can be sent to the isda-ws-request Moira list, or entered into the ISDA::WS-REQUEST Request Tracker queue directly.

SLA

You can submit a support request to the RT queue ISDA::WS-SUPPORT via the isda-ws-support Moira list, or directly via RequestTracker.

more information to come. 

Description

Uses Roles DB to answer the question "can x do y with z?" and to get user auths.
 
There are 2 exposed API's.

  • listAuthorizationsByPerson
    • given a Kerberos principal, what are the ROLES authorizations?
    • listAuthorizationsByPerson(String UserName, String category, boolean isActive, boolean willExpand, String applicationName, String proxyUserName) and returns an array of authorization objects
  • isUserAuthorized
    • Does a specified Kerberos principal have the ROLES authorization for a given function, qualifier and category?
    • isUserAuthorized(String UserName, String function_category, String function_name, String qualifier_code, String proxyUserName) and returns a boolean value.
  • No labels