cmr.opendap.auth.core

This namespace represents the authorization API for CMR OPeNDAP. This is where the rest of the application goes when it needs to perform checks on roles or permissions for a given user and/or concept.

Currently, this namespace is only used by the REST middleware that checks resources for authorization.

check-permissions

(check-permissions system handler request route-permissions user-token user-id)

A supporting function for check-roles-permissions that handles the permissions side of things.

check-roles

(check-roles system handler request route-roles user-token user-id)

A supporting function for check-roles-permissions that handles the roles side of things.

check-roles-permissions

(check-roles-permissions system handler request route-roles route-permissions)

A supporting function for check-route-access that handles the actual checking.

check-route-access

(check-route-access system handler request)

This is the primary function for this namespace, utilized directly by CMR OPeNDAP’s authorization middleware. Given a request which contains route-specific authorization requirements and potentially a user token, it checks against these as well as the level of access require for any requested concepts.