Microservice RBAC

NEMISIS

Well-known member
  • Nov 13, 2013
    11,348
    19,441
    113
    Colombo
    sub level permissions kiwuwe monada?

    user innawa
    user ta role thiyanawa
    role walata associate wela permission thiyanawa, ohoma thamao generally RBAC implement karanne.

    uba kohomada wade karanne, APIM solution ekak thiye da
    IDP kohomada, AZ mechanism eka momadda jwt da?
     

    holman khan

    Well-known member
  • Oct 19, 2021
    846
    563
    93
    sub level permissions kiwuwe monada?

    user innawa
    user ta role thiyanawa
    role walata associate wela permission thiyanawa, ohoma thamao generally RBAC implement karanne.

    uba kohomada wade karanne, APIM solution ekak thiye da
    IDP kohomada, AZ mechanism eka momadda jwt da?
    Jwt aran thiyenne,
     
    Last edited:
    • Like
    Reactions: Solo Rider

    NEMISIS

    Well-known member
  • Nov 13, 2013
    11,348
    19,441
    113
    Colombo
    E kiwwe role ekata thiyana CREATE ,Delete wage api access Tika
    ewa sub level kiyala hitanna ona na neda, simply mehema karala permission check eka apim eka level eken kara nam hari. godak complicate kara ganne natuwa karanna puluwan

    wenna ona hama action ekak ma permission ekak vidiyata hitanna.

    role = user
    permissions
    userspi.create
    userspi.read

    role = manager
    permissions
    userapi.create
    userapi.edit
    userspi.delete
    reportapi.read
     

    holman khan

    Well-known member
  • Oct 19, 2021
    846
    563
    93
    ow mehema karanna puluwan
    ewa sub level kiyala hitanna ona na neda, simply mehema karala permission check eka apim eka level eken kara nam hari. godak complicate kara ganne natuwa karanna puluwan

    wenna ona hama action ekak ma permission ekak vidiyata hitanna.

    role = user
    permissions
    userspi.create
    userspi.read

    role = manager
    permissions
    userapi.create
    userapi.edit
    userspi.delete
    reportapi.read
    ooo ohoma gannawanam db desining eka mon wage da enne , kohomata oka anith micorservice walata yawanne ,jwt token ekata embedd karala da
     

    NEMISIS

    Well-known member
  • Nov 13, 2013
    11,348
    19,441
    113
    Colombo
    roles tika jwt eke embed karanna puluwan
    role - permission mapping eka db ekaka thiya ganna puluwan
    jwt eka validate karaddi,(APIM Level) permission tika fetch karala service call chain ekats pass karanna pukuwan (middle ware ekak wage use karannat puluwan)

    ehema nat nam authorization service ekak hadala, eka athule validation tika serama karala, each micro service eken authorization service eka call karannat puluwan.

    serama api validation part eka single apim solution ekak hari scale up karapu micro service ekak use karala, separate authorization service ekakata call karala authorize karana eka hoda design ekak wenna puluwan. mokada separate apim ekak na wage kiyala hithenawa oyage implementation eke