Authorisation
Auth
AvailableAnswers “may user X do Y” ower HTTP.
Ower HTTP, Auth tells a service gin user X can dae Y. It haunles authorisation anerly an lippens tae the caller tae ken wha the user is. It disnae sign onybodie in, hain passwords, issue tokens or manage sessions. The model haes users, roles an permissions, an a user hauds a permission exackly whan yin o their roles hauds it.
Wha it is for. Services that need role-based access control an dinnae want tae maintain their ain roles an permissions tables.
- Status
- Available
- Pairt o
- Core platform
- Product site
- auth.rodmena.app
- Tags
- Access controlRoles an permissionsAe deceesion
Whit it daes
-
Ae quaisten
The API haes the yin quaisten tae answer, “can user X dae Y”, an it answers it on the same gate fur aw services.
-
Users, roles, permissions
Users gets a role's permissions throu membership o that role, an thair is nocht mair tae model.
-
Authorisation only
Passwirds, sessions an tokens is oot o scope an belangs tae RODMENA ID.
-
Quick tae tak up
Acause a check is the yin caw wi the yin answer in a fixed response shape, a service can be brocht unner central access control in an efternuin.
Documentation an access details is on the product site, auth.rodmena.app. For a pilot, an integration or procurement questions, contact us.