Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce "_p.asEngine()" method to return an accessor with preset "__engine" accoount and role #34

Open
shimono opened this issue Jan 24, 2018 · 0 comments
Assignees

Comments

@shimono
Copy link
Member

shimono commented Jan 24, 2018

Overview

Introduce a new accessor creation method "asEngine()" in the engine library and make
the following code return an accessor with pseudo role "../__/__engine" and pseudo account "__engine"

  _p.asEngine().cell().

Token spec

Engine should then return an access token with the following spec:

Role Subject
box/_engine {CellURL}#__engine
../__/_engine {CellURL}#__engine

With these modifications, box install alone can enable engine to access any box-local resource by distributing ACL to grant "__engine" to access that resource.

Related Core modification

personium/personium-core#431

considerations.

  • Is it necessary to accept pseudo-account "__engine" as a "serviceSubject" attribute in the ESC (Engine Service Collection) setting?
  • Do we need another pseudo-role, pseudo-account "__rule" for event-rule-triggered execution of engine script?
@shimono shimono changed the title Support for a preset account "__engine" to be used in "serviceSubject" attribute in ESC Introduce "_p.asEngine()" method to return an accessor with preset "__engine" accoount and role Jun 28, 2019
@shimono shimono self-assigned this Jun 29, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant