Service URL

https://authz.mapws.mit.edu

Service WSDL

https://authz.mapws.mit.edu/uaws/services/ua?wsdl

Security

This service requires client authentication. Applications wishing to use this service must obtain an application certificate. For more information on this process see: Application Certificate Documentation.

Applications must also be provisioned have access rights to the service. Requests can be sent to the isda-ws-request Moira list, or entered into the ISDA::WS-REQUEST Request Tracker queue directly.

SLA

more to come...

Description

Uses Roles DB to answer the question "can x do y with z?" and to get user auths.
 
There are 2 exposed API's.

• listAuthorizationsByPerson
  • given a Kerberos principal, what are the ROLES authorizations?

  • listAuthorizationsByPerson(String UserName, String category, boolean isActive, boolean willExpand, String applicationName, String proxyUserName) and returns an array of authorization objects

• isUserAuthorized
  • Does a specified Kerberos principal have the ROLES authorization for a given function, qualifier and category?

• • isUserAuthorized(String UserName, String function_category, String function_name, String qualifier_code, String proxyUserName) and returns a boolean value.