Description
We will need a new acls extension (similar to AclsAuthz) to support this functionality. Following, is an example of how this might look.
<provider>
<role>authorization</role>
<name>PathAclsAuthz</name>
<enabled>true</enabled>
<param>
<name>path.acl</name>
<value>https://*:*/**/knoxtoken/api/**;admin;*;*</value>
</param>
</provider>
This new extension (`path` in the above example) will work with CompositeAuthz and follow the same pattern as AclsAuthz provider.
Attachments
Issue Links
- is related to
-
KNOX-3015 Document path based authorization feature
-
- Resolved
-
- links to
