api-layer icon indicating copy to clipboard operation
api-layer copied to clipboard

Display ZLUX API catalog services according the SAF user profile

Open GilPen opened this issue 3 years ago • 4 comments

Hello

Is it possible to prevent the display of z/OSMF services in ZLUX API ACATLOG for a standard user RACF group and to keep it for an admin RACF group ?

Thanks for your help.

Regards Gilles Peniguel

GilPen avatar Jul 29 '21 13:07 GilPen

I'm going to transfer this over to the api-layer repo because I think you mean the API Catalog App, correct? The display of what's possible should still disallow unprivileged users from actually making use of the APIs, but I'm not sure if the documentation that they exist can be hidden at this time. Hopefully the api-layer repo maintainers will know the answer.

1000TurquoisePogs avatar Jul 29 '21 13:07 1000TurquoisePogs

@GilPen It isn't possible at the moment. Could you help us understand a bit more the use case you have in mind? So we can appropriately prioritize the issue.

Also if this topic is important to you, could you please thumbs-up the issue as this helps us to prioritize issues.

balhar-jakub avatar Aug 30 '21 07:08 balhar-jakub

Hello

We would like to display some services in the ZOWE swagger according their rights in th SAF.

For example, we write some personnal services for a standard user. The service use ZOSMF REST API. But we woulnd't like the user runs ZOSMF REST API directly from the swagger. We want to prevent some dangerous operations. So we would like ZOSMF API doesn' t appear in the swagger menu for the standard users.

But if you are a ZOWE admin, you need to see all services avaiable in the swagger.

Regards Gilles Peniguel

GilPen avatar Sep 16 '21 09:09 GilPen

@GilPen Thanks for the clarification. I will change the question to an enhancement request. We will discuss the priority this Wednesday if you want to join.

In order to help us understand the priority of the issue, could you also add a Thumbs-up to the issue?

balhar-jakub avatar Sep 21 '21 08:09 balhar-jakub