Composite Operations Data Access Control: Principles

systemintranet Holds users who access Oracle Service Registry via a local intranet. This group is reserved for a future release. There is no implementation behind it as of Oracle Service Registry 11.1.1

5.1.5. ACL tModels

ACL permissions are represented as tModels as detailed below: v2 tModelKey v3 tModelKey ACL Permission uuid:aacfc8e0-dcf5-11d5-b238-cbbeaea0a8d4 uddi:systinet.com:acl:find-allowed find allowed uuid:ced3c160-dcf5-11d5-b238-cbbeaea0a8d4 uddi:systinet.com:acl:find-denied find denied uuid:f9977a90-dcf5-11d5-b238-cbbeaea0a8d4 uddi:systinet.com:acl:get-allowed get allowed uuid:09e202d0-dcf6-11d5-b238-cbbeaea0a8d4 uddi:systinet.com:acl:get-denied get denied uuid:19885bd0-dcf6-11d5-b239-cbbeaea0a8d4 uddi:systinet.com:acl:save-allowed save allowed uuid:2a25e610-dcf6-11d5-b239-cbbeaea0a8d4 uddi:systinet.com:acl:save-denied save denied uuid:37f44ac0-dcf6-11d5-b239-cbbeaea0a8d4 uddi:systinet.com:acl:delete-allowed delete allowed uuid:4e51d8f0-dcf6-11d5-b239-cbbeaea0a8d4 uddi:systinet.com:acl:delete-denied delete denied uuid:5bc32980-dcf6-11d5-b239-cbbeaea0a8d4 uddi:systinet.com:acl:create-allowed create allowed uuid:6d0be7e0-dcf6-11d5-b239-cbbeaea0a8d4 uddi:systinet.com:acl:create-denied create denied

5.1.6. Setting ACLs on UDDI v3 Structures

In UDDI v3, explicit ACL permission is saved in a special keyedReferenceGroup having the tModelKey uddi:systinet.com:acl . This keyedReferenceGroup can contain only keyedReferences to ACL tModels. Only the terms user and group are allowed in the included keyName, and the keyValue must contain the name of the user or group according to keyName value. For example, user demo_john can save update following businessEntity even if he is not the owner: Example 1. Setting ACLs - v3 businessEntity xmlns=urn:uddi-org:api_v3 ... categoryBag ... keyedReferenceGroup tModelKey=uddi:systinet.com:acl keyedReference tModelKey=uddi:systinet.com:acl:save-allowed keyName=user keyValue=demo_john ... keyedReferenceGroup categoryBag businessEntity

5.1.7. Setting ACLs on UDDI v1v2 Structures

Under versions 1 and 2 of UDDI, explicit ACL permission is saved as a special keyedReference in the categoryBag. This keyedReference refers to one of the tModels representing ACL permissions. Only the terms user and group are allowed in the included keyName and the keyValue must contain the name of the user or group according to the keyName value. Page 208

5.1.7. Setting ACLs on UDDI v1v2 Structures