cmr.authz.roles
Roles for CMR OPeNDAP are utilized in the application routes when it is necessary to limit access to resources based on the role of a user.
Roles are included in the route definition along with the route’s handler. For example: ``` [… [“my/route” { :get {:handler my-handlers/my-route :roles #{:admin}} :post …}] …]
admin
(admin base-url token user-id)Query the CMR Access Control API to get the roles for the given token+user.
cmr-acl->reitit-acl
(cmr-acl->reitit-acl cmr-acl)Documentation forthcoming
echo-management-query
The query formatter used when making a roles query to the CMR Access Control API. Note that only the management ACL is currently supported, and that this maps below to admin.
extract-acl-perms
(extract-acl-perms cmr-acl)Documentation forthcoming
management-acl
The canonical ingest management ACL definition.
roles-key
(roles-key token)Generate a key to be used for caching role data.
route-annotation
(route-annotation request)Extract any roles annotated in the route associated with the given request.