Skip to content
Snippets Groups Projects
Commit 0da5a4a6 authored by mbrodhu's avatar mbrodhu
Browse files

changes

parent 88117b3d
No related branches found
No related tags found
No related merge requests found
...@@ -6,52 +6,44 @@ userExists ...@@ -6,52 +6,44 @@ userExists
Checks whether this UserID (eduPersonPrincipalName) exists in RBAC. Checks whether this UserID (eduPersonPrincipalName) exists in RBAC.
* Input Parameters userExistsRequest, with elements * Input Parameters userExistsRequest, with elements
* auth - String, SessionID of application or user asking * auth - String, SessionID of application or user asking
* log - String for log information, optional * log - String for log information, optional
* username - String containing the ID (ePPN) of the user * username - String containing the ID (ePPN) of the user
* Output Parameters booleanResponse, with element * Output Parameters booleanResponse, with element
* result - boolean, true if user exists, false otherwise * result - boolean, true if user exists, false otherwise
* Faults * Faults:
* authenticationFault * authenticationFault
getNames getNames
-------- --------
Returns user records for a list of ePPNs Returns user records for a list of ePPNs
* Input Parameters getNamesRequest, with elements * Input Parameters getNamesRequest, with elements
* auth - String, SessionID of user that wants to query for names * auth - String, SessionID of user that wants to query for names
* log - String, * log - String,
* ePPN - List of Strings * ePPN - List of Strings
* Output Parameters getNamesResponse. It contains 0...n userDetails, which themselves have elements
* ePPN - String holding ePPN of user
* name - String holding Name (cn) of user
* mail - String holding E-Mail address of user
* organisation - String holding user' affiliation
* agreesearch - Boolean, whether user wants his ID to be found be a search for name or mail address
* usersupplieddata - Boolean, whether user himself or his organisation supplied these data
* Faults none
getIDs getIDs
------ ------
Returns user records for a name or mail address. Returns user records for a name or mail address.
* Input Parameters getIDsRequest, with elements * Input Parameters getIDsRequest, with elements
* auth - String, SessionID of user that wants to query for names * auth - String, SessionID of user that wants to query for names
* log - String, * log - String,
* name - String with Name * name - String with Name
* mail - String with E-Mail Address * mail - String with E-Mail Address
* organisation - String with Organisation * organisation - String with Organisation
* Output Parameters getIDsResponse. It contains 0...n userDetails, which themselves have elements * Output Parameters getIDsResponse. It contains 0...n userDetails, which themselves have elements
* ePPN - String holding ePPN of user * ePPN - String holding ePPN of user
* name - String holding Name (cn) of user * name - String holding Name (cn) of user
* mail - String holding E-Mail address of user * mail - String holding E-Mail address of user
* organisation - String holding user' affiliation * organisation - String holding user' affiliation
* agreesearch - Boolean, whether user wants his ID to be found be a search for name or mail address * agreesearch - Boolean, whether user wants his ID to be found be a search for name or mail address
* usersupplieddata - Boolean, whether user himself or his organisation supplied these data * usersupplieddata - Boolean, whether user himself or his organisation supplied these data
* Faults none * Faults none
getObjects getObjects
---------- ----------
...@@ -98,52 +90,46 @@ tgAssignedProjects ...@@ -98,52 +90,46 @@ tgAssignedProjects
Returns projectIDs of all projects the user has some role in. Returns projectIDs of all projects the user has some role in.
* Input Parameters tgAssignedProjectsRequest, with elements * Input Parameters tgAssignedProjectsRequest, with elements
* auth - String, SessionID of user that wants to query for roles * auth - String, SessionID of user that wants to query for roles
* log - String for log information, optional * log - String for log information, optional
* level - Integer. Can be either empty (= level 0) or one of the following: * level - Integer. Can be either empty (= level 0) or one of the following:
* 0 - Returns all projects the user has any role in (default). * 0 - Returns all projects the user has any role in (default).
* 1 - Returns only projects where the user has read access, i.e. * 1 - Returns only projects where the user has read access, i.e.
* she is Beobachter (observer) or * she is Beobachter (observer) or
* she is Bearbeiter (editor) or * she is Bearbeiter (editor) or
* there are any public resources in the project
* 2 - like level 1, but public resources do not count
* 3 - Returns only projects where the user has write access, i.e. she is Bearbeiter (editor)
* 4 - Returns only projects where the user has delegate access, i.e. she is Projektleiter (project leader)
* Output Parameters rolesetResponse, with element
* role - String with projectID (no full-qualified role name is needed here). Can occur multiple times.
getAllProjects getAllProjects
-------------- --------------
Returns all projects stored in this RBAC instance with ID, name, and description. See also getProjectDescription(). Returns all projects stored in this RBAC instance with ID, name, and description. See also getProjectDescription().
* Input Parameters getAllProjectsRequest, with elements * Input Parameters getAllProjectsRequest, with elements
* auth - String, SessionID of user that wants to query for projects. Can be omitted as this information can be reviewed publicly * auth - String, SessionID of user that wants to query for projects. Can be omitted as this information can be reviewed publicly
* log - String for log information, optional * log - String for log information, optional
* Output Parameters getAllProjectsResponse, with element * Output Parameters getAllProjectsResponse, with element
* project - projectInfo, can occur multiple times. * project - projectInfo, can occur multiple times
* The type projectInfo consists of the following elements: * The type projectInfo consists of the following elements:
* id - String, project ID, such as "TGPR123" * id - String, project ID, such as "TGPR123"
* description - String, project description * description - String, project description
* name - String, project name * name - String, project name
* file - String with URI of project file for project-specific settings. * file - String with URI of project file for project-specific settings.
getDeactivatedProjects getDeactivatedProjects
---------------------- ----------------------
Returns all projects stored in this RBAC instance with ID, name, and description that are deactivated and can be reactivated by the current user. Returns all projects stored in this RBAC instance with ID, name, and description that are deactivated and can be reactivated by the current user.
* Input Parameters getAllProjectsRequest, with elements * Input Parameters getAllProjectsRequest, with elements
* auth - String, SessionID of user that wants to query for projects. Can be omitted as this information can be reviewed publicly * auth - String, SessionID of user that wants to query for projects. Can be omitted as this information can be reviewed publicly
* log - String for log information, optional * log - String for log information, optional
* Output Parameters getDeactivatedProjectsResponse, with element * Output Parameters getDeactivatedProjectsResponse, with element
* project - projectInfo, can occur multiple times. * project - projectInfo, can occur multiple times.
* The type projectInfo consists of the following elements: * The type projectInfo consists of the following elements:
* id - String, project ID, such as "TGPR123" * id - String, project ID, such as "TGPR123"
* description - String, project description * description - String, project description
* name - String, project name * name - String, project name
* file - String with URI of project file for project-specific settings. * file - String with URI of project file for project-specific settings.
getLeader getLeader
--------- ---------
...@@ -471,7 +457,7 @@ Hides a project. User must be project leader of the project to be deactivated. H ...@@ -471,7 +457,7 @@ Hides a project. User must be project leader of the project to be deactivated. H
* project - String, ProjectID * project - String, ProjectID
* Output Parameters booleanResponse, with element * Output Parameters booleanResponse, with element
* result - boolean, true if operation was successful, false otherwise * result - boolean, true if operation was successful, false otherwise
Faults * Faults
* authenticationFault * authenticationFault
reactivateProject reactivateProject
......
...@@ -6,10 +6,6 @@ ...@@ -6,10 +6,6 @@
TG-auth* TG-auth*
======== ========
--------
Overview
--------
The tg-auth* system consists of two main components: The tg-auth* system consists of two main components:
* openRBAC, a system to maintain, modify, and enforce authorization policies using the Role-Based Access Control framework. See http://www.openrbac.de/, however, the basic software has been heavily customized for use with TextGrid * openRBAC, a system to maintain, modify, and enforce authorization policies using the Role-Based Access Control framework. See http://www.openrbac.de/, however, the basic software has been heavily customized for use with TextGrid
...@@ -105,3 +101,20 @@ Endpoints for the productive TextGridRep: ...@@ -105,3 +101,20 @@ Endpoints for the productive TextGridRep:
* WebAuthN (User Details mode): https://textgridlab.org/1.0/WebAuthN/TextGrid-WebAuth.php?authZinstance=textgrid-esx1.gwdg.de (append "&Sid=XXXX&ePPN=YYY@ZZZ", see above) * WebAuthN (User Details mode): https://textgridlab.org/1.0/WebAuthN/TextGrid-WebAuth.php?authZinstance=textgrid-esx1.gwdg.de (append "&Sid=XXXX&ePPN=YYY@ZZZ", see above)
* PWchange: https://textgridlab.org/1.0/PWchange/index.php * PWchange: https://textgridlab.org/1.0/PWchange/index.php
* PWreset: https://textgridlab.org/1.0/pwReset.pl * PWreset: https://textgridlab.org/1.0/pwReset.pl
API Documentation
-----------------
.. toctree::
:maxdepth: 2
api/tg-authApi.rst
License
-------
See LICENCE_
.. _LICENCE: https://projects.gwdg.de/projects/tg-auth/repository/revisions/master/raw/LICENSE.txt
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment