{"action":"created","issue":{"url":"https://api.github.com/repos/Waziup/Platform/issues/61","repository_url":"https://api.github.com/repos/Waziup/Platform","labels_url":"https://api.github.com/repos/Waziup/Platform/issues/61/labels{/name}","comments_url":"https://api.github.com/repos/Waziup/Platform/issues/61/comments","events_url":"https://api.github.com/repos/Waziup/Platform/issues/61/events","html_url":"https://github.com/Waziup/Platform/issues/61","id":191879758,"number":61,"title":"Spec: comment aam spec file","user":{"login":"cdupont","id":484033,"avatar_url":"https://avatars.githubusercontent.com/u/484033?v=3","gravatar_id":"","url":"https://api.github.com/users/cdupont","html_url":"https://github.com/cdupont","followers_url":"https://api.github.com/users/cdupont/followers","following_url":"https://api.github.com/users/cdupont/following{/other_user}","gists_url":"https://api.github.com/users/cdupont/gists{/gist_id}","starred_url":"https://api.github.com/users/cdupont/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cdupont/subscriptions","organizations_url":"https://api.github.com/users/cdupont/orgs","repos_url":"https://api.github.com/users/cdupont/repos","events_url":"https://api.github.com/users/cdupont/events{/privacy}","received_events_url":"https://api.github.com/users/cdupont/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"cdupont","id":484033,"avatar_url":"https://avatars.githubusercontent.com/u/484033?v=3","gravatar_id":"","url":"https://api.github.com/users/cdupont","html_url":"https://github.com/cdupont","followers_url":"https://api.github.com/users/cdupont/followers","following_url":"https://api.github.com/users/cdupont/following{/other_user}","gists_url":"https://api.github.com/users/cdupont/gists{/gist_id}","starred_url":"https://api.github.com/users/cdupont/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cdupont/subscriptions","organizations_url":"https://api.github.com/users/cdupont/orgs","repos_url":"https://api.github.com/users/cdupont/repos","events_url":"https://api.github.com/users/cdupont/events{/privacy}","received_events_url":"https://api.github.com/users/cdupont/received_events","type":"User","site_admin":false},"assignees":[{"login":"cdupont","id":484033,"avatar_url":"https://avatars.githubusercontent.com/u/484033?v=3","gravatar_id":"","url":"https://api.github.com/users/cdupont","html_url":"https://github.com/cdupont","followers_url":"https://api.github.com/users/cdupont/followers","following_url":"https://api.github.com/users/cdupont/following{/other_user}","gists_url":"https://api.github.com/users/cdupont/gists{/gist_id}","starred_url":"https://api.github.com/users/cdupont/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cdupont/subscriptions","organizations_url":"https://api.github.com/users/cdupont/orgs","repos_url":"https://api.github.com/users/cdupont/repos","events_url":"https://api.github.com/users/cdupont/events{/privacy}","received_events_url":"https://api.github.com/users/cdupont/received_events","type":"User","site_admin":false},{"login":"malishahi","id":6231866,"avatar_url":"https://avatars.githubusercontent.com/u/6231866?v=3","gravatar_id":"","url":"https://api.github.com/users/malishahi","html_url":"https://github.com/malishahi","followers_url":"https://api.github.com/users/malishahi/followers","following_url":"https://api.github.com/users/malishahi/following{/other_user}","gists_url":"https://api.github.com/users/malishahi/gists{/gist_id}","starred_url":"https://api.github.com/users/malishahi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/malishahi/subscriptions","organizations_url":"https://api.github.com/users/malishahi/orgs","repos_url":"https://api.github.com/users/malishahi/repos","events_url":"https://api.github.com/users/malishahi/events{/privacy}","received_events_url":"https://api.github.com/users/malishahi/received_events","type":"User","site_admin":false},{"login":"ARBISWAS","id":19208809,"avatar_url":"https://avatars.githubusercontent.com/u/19208809?v=3","gravatar_id":"","url":"https://api.github.com/users/ARBISWAS","html_url":"https://github.com/ARBISWAS","followers_url":"https://api.github.com/users/ARBISWAS/followers","following_url":"https://api.github.com/users/ARBISWAS/following{/other_user}","gists_url":"https://api.github.com/users/ARBISWAS/gists{/gist_id}","starred_url":"https://api.github.com/users/ARBISWAS/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ARBISWAS/subscriptions","organizations_url":"https://api.github.com/users/ARBISWAS/orgs","repos_url":"https://api.github.com/users/ARBISWAS/repos","events_url":"https://api.github.com/users/ARBISWAS/events{/privacy}","received_events_url":"https://api.github.com/users/ARBISWAS/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2016-11-27T19:31:07Z","updated_at":"2016-11-27T19:42:58Z","closed_at":null,"body":"Initial Authentication and Authorization Manager is here:\r\nhttps://github.com/Waziup/Platform/blob/master/identity/access_control_spec.md"},"comment":{"url":"https://api.github.com/repos/Waziup/Platform/issues/comments/263142488","html_url":"https://github.com/Waziup/Platform/issues/61#issuecomment-263142488","issue_url":"https://api.github.com/repos/Waziup/Platform/issues/61","id":263142488,"user":{"login":"cdupont","id":484033,"avatar_url":"https://avatars.githubusercontent.com/u/484033?v=3","gravatar_id":"","url":"https://api.github.com/users/cdupont","html_url":"https://github.com/cdupont","followers_url":"https://api.github.com/users/cdupont/followers","following_url":"https://api.github.com/users/cdupont/following{/other_user}","gists_url":"https://api.github.com/users/cdupont/gists{/gist_id}","starred_url":"https://api.github.com/users/cdupont/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cdupont/subscriptions","organizations_url":"https://api.github.com/users/cdupont/orgs","repos_url":"https://api.github.com/users/cdupont/repos","events_url":"https://api.github.com/users/cdupont/events{/privacy}","received_events_url":"https://api.github.com/users/cdupont/received_events","type":"User","site_admin":false},"created_at":"2016-11-27T19:42:58Z","updated_at":"2016-11-27T19:42:58Z","body":"> ### Basic roles: \r\n> - Developer – develops and publishes an app, provides support\r\n> - User – subscribes to an app\r\n> - Data provider – provides data (in the form of data channels) to the platform \r\n> \r\n> Roles can be also mixed – e.g. if a user owns the sensors and acts also as a data p\r\n\r\nI think those roles are concretely just set of policies in the aam. They are not directly visible to the users.\r\nWhen a new user registers with the platform, they gain all three roles: dev access, user of apps, data provider.\r\n\r\n> \r\n> ### Data subscription models:\r\n> -\tData are subscribed to by developers, who provide data in their apps to users.\r\n> (A business model could be based on of a flat rate or on the amount of users or requests served with the data.)\r\n> -\tData are subscribed to by users (or by developers on behalf of users). Users provide data to apps in order to benefit from some analytics/visualization offered by the apps.\r\n> (A business model could be based on a flat rate or on amount of apps or requests consuming the data.)\r\n\r\nSubscriptions on data sources can be made on Orion: https://fiware-orion.readthedocs.io/en/master/user/walkthrough_apiv2/index.html#subscriptions\r\n\r\nBut Orion doesn't seem to support authorizations mechanism. There are a mechanisms called \"Fiware-service\" and \"Fiware-ServicePath\" meant to provide tenant isolation and entity hierarchical scoping, respectively:\r\nhttp://fiware-orion.readthedocs.io/en/master/user/service_path/\r\nhttps://github.com/Waziup/Platform/issues/49\r\n\r\nI don't think that the aam should keep track of every single entity created in Orion... However we could decide to create a \"Fiware-Service\" for each user registered. The aam could then grant access to this specific Fiware-Service.\r\n\r\n> ### Authentication/authorization manager (AAM) keeps track of the following:\r\n> -\tdevelopers, users and data providers - Each entity has one single identity, but may assume multiple roles.\r\nWhat do you call identity here?\r\n\r\n> -\tapplications published in the platform\r\n\r\nDeis has its own registration mechanism: \r\nhttps://deis.com/docs/workflow/users/registration/\r\nWhen a user register with the platform, I suppose we can register him with deis immediately (same login/password). This gives us a token, that can be used in subsequent API uses. What do you think?\r\n\r\n> -\twhat applications users are subscribed to and when their subscription ends\r\n\r\nWaziup should probably provide authentication as a service to apps. It could be a front-end authentication page (login/password) for applications pushed... This page would be presented before the user can access an application. \r\n\r\n> -\tdata channels a data provider provides and of the associated business model\r\n> -\tdata channels a developer/user is subscribed to, under which business model and when the subscription ends\r\n> -\tdata channels that an application is authorized to use on behalf of a developer or a user\r\n\r\nAs said I don't think the aam should be aware of all the entities/subscriptions...\r\n\r\n> \r\n> When a developer publishes an application, it authorizes it to use some of the data channels he/she is subscribed to.\r\n> When a use subscribes to an application, he/she authorizes to use certain data on his/her behalf.\r\n> "}}
{"actor":{"display_login":"cdupont"}}