Simple Authorization Service

[aedelmann]

When the repository is used in simple setup integrating with external Identity Providers, such as Github, the repository provides a simple authorization module implementation that grants the user all rights to access resources.

Confirmations:

• Simple implementation of an Authorization module that grants users all access to resources except for administrative functions
• The implementation maintains a list of users that are allowed to perform administrative functions.

The following roles and their access permissions are applied on REST Resources:

• ModelsValidator : Access of GET api/v1/models/{id}
• ModelsExplorer : GET api/v1/models/* , GET /rest/comments
• ModelsIntegrator : GET api/v1/generation/*
• ModelsCreator : POST/PUT api/v1/models, POST/PUT api/v1/importers
• ModelsPromoter : api/v1/workflows/*
• ModelReviewer : May approve / reject models which are inReview state.