UC Name

Developer API and Policy Logic

Actors:

Developer, Developer Components, Security Service

Description:

The purpose of this use case is to document how Developer API and Policy Logic works confirming permissions for a user.

Pre-Conditions:

1. The Authorization Service is running successfully

2. The Security Service is running successfully

3. User connected to the network to access the DB in the respective environment (INT, QA, PROD)

Post-Conditions:

1. Return True or False for permissions aligned to a particular user

Triggers:

Developer confirms permissions for a particular user by using “HasPermissions” method.

Assumption

Existing application data is correct

Risk

Existing application data is incorrect

Rules

Developer has access to the network to access environment specific DB.

Main Flow (MF01):

Return Scope Tree Nodes (GetScopeTree)

Step

User Action

System Action

1. 1

Developer confirms user permission by using the method:

“HasPermissions(userId, permissionsId, scopetreenodeId)”

System configures IAuthZManagerFactory

N/A

System creates IAuthZManager to request user permissions

N/A

System request IAuthRepository to provide user permissions

N/A

IAuthRepository checks the service client memory cache for the user.

If user exists in cache, steps 5 or otherwise 8.

N/A

Systems pulls user application permissions and scope tree nodes from cache.

N/A

System resets cache timer

N/A

System returns True or False for user – HasPermissions method.

Note: Please refer Policy Logic Diagram for Permissions.

N/A

IAuthRepository invokes GetUserPermissions service – Please follow steps in “Permissions and Scope Tree Services – Return Scoped User Application Permissions” use case.

N/A

IAuthRepository invokes GetScopeTree service - Please follow steps in “Permissions and Scope Tree Services – Return Scope Tree Nodes” use case.

N/A

IAuthRepository invokes GetDefault service – Steps will be included in the Permissions and Scope Tree Services use case.

N/A

System will store Scoped User Permissions, Scope Tree Nodes, and Default Scope Tree information for the user in the service client memory cache.

N/A

System returns True or False for user – HasPermissions method.

Note: Please refer Policy Logic Diagram for Permissions.