cmr.opendap.auth.core
This namespace represents the authorization API for CMR OPeNDAP. This is where the rest of the application goes when it needs to perform checks on roles or permissions for a given user and/or concept.
Currently, this namespace is only used by the REST middleware that checks resources for authorization.
check-permissions
(check-permissions system handler request route-permissions user-token user-id)A supporting function for check-roles-permissions that handles the permissions side of things.
check-roles
(check-roles system handler request route-roles user-token user-id)A supporting function for check-roles-permissions that handles the roles side of things.
check-roles-permissions
(check-roles-permissions system handler request route-roles route-permissions)A supporting function for check-route-access that handles the actual checking.
check-route-access
(check-route-access system handler request)This is the primary function for this namespace, utilized directly by CMR OPeNDAP’s authorization middleware. Given a request which contains route-specific authorization requirements and potentially a user token, it checks against these as well as the level of access require for any requested concepts.