(This message has been automatically imported from the retired mailing list)
Hello,
We have built a tiny access control system based on service name and
client credentials
(it just checks if there’s a match in the access matrix),
we would like to group services in order to be able to enable/disable
access on a group of services for a client.
The AC server has its own separate database (Zato has no access to that).
Our AC server retrieves the list of services from Zato using the public API,
I’m currently looking for a way to define group membership in the source
code of a service and retrieve it through Zato.
One solution could be to retrieve the source code for each service and
parse for a ‘group’ variable, but that’s kind of dirty and I would like
to check if there’s a more elegant solution to this.
Another solution would be to populate some database in
before_add_to_store() (assuming we have database [or kvdb] access in
that method). A downside of this is that we would have to deploy a
service to retrieve the service groups (or retrieve it directly from the
db which is not ideal either).
So there are a couple of possibilities, but I am looking for the
absolute super-elegant one
Any ideas?
Cheers!
Andrea.