Filter credentials by user ID¶
Enable control of credentials for users via the Identity policy file
Problem Description¶
Credentials can be created for users and stored in the Identity service, tagged
with the appropriate user_id. The Identity service policy engine will
already allow a user to have control over their own credentials, for update,
get and delete operations. However, in order to get a credential you must know
its ID, and the only way to get an ID is to list those credentials tagged with
your user_id. The only way to control such listing via policy is via
using the policy control of filters - but the list credentials API does not
support a filter on user_id.
Proposed Change¶
Add a filter of user_id to the list credentials API.
Alternatives¶
None
Data Model Impact¶
None
REST API Impact¶
The exact API specification will be defined as part of a review of an changes to the Identity API, but will simply consist of adding a standard filter options of user_id.
Security Impact¶
None
Notifications Impact¶
None
Other End User Impact¶
None
Performance Impact¶
None
Other Deployer Impact¶
None
Developer Impact¶
None
Implementation¶
Assignee(s)¶
- Primary assignee:
henry-nash
- Additional assignee:
Alexey Miroshkin
Work Items¶
Update API specifications
Implement the filter in controller code
Dependencies¶
None
Testing¶
None
Documentation Impact¶
Update to the Identity API to list the new filter attribute.
References¶
None
