You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Many users with an existing installation want to use specmesh on non-structured/non-compliant topics
Resolution
ACL/Permissions - support permission configuration via channel tags: _public, _private, _protected
Root Id - specmesh uses a root id as the ACL/Domain owner - this doubles as the service id (no change)
Define absolute paths on owned topics. See below.
Normally topics are appended to the id. i.e. domain-owner + permission + topic. In this case, the topic:
doesn't start with _public/_private/_protected, imported/requested topic are of the form:
a remote topic like: acme.simple_range.transport._public.tube. id: acme.simple_range'
Resolution:
Require topics to include the same id on the prefix. i.e. domain: acme.domain-id is located at the id and also used on the topic prefix. The only difference here is there is no permission prefix _public etc. it requires a permission tag - see Resolution item 1. above
This approach will grant permission ACLs/metrics because the topic prefixing with the domain id is supported. Installations without a domain id - must be 'imported'
Therefore we can use
domain-id.topic-name
as opposed to the expected domain-id.{permission}.topic-name
In short, the resolution is to:
support moving the permission to the tag on the channel
Many users with an existing installation want to use specmesh on non-structured/non-compliant topics
Resolution
Normally topics are appended to the
id. i.e. domain-owner + permission + topic
. In this case, the topic:acme.simple_range.transport._public.tube
. id: acme.simple_range'Resolution:
id
on the prefix. i.e.domain: acme.domain-id
is located at theid
and also used on the topic prefix. The only difference here is there is no permission prefix_public
etc. it requires a permission tag - see Resolution item 1. aboveThis approach will grant permission ACLs/metrics because the topic prefixing with the domain id is supported. Installations without a domain id - must be 'imported'
Therefore we can use
domain-id.topic-name
as opposed to the expected
domain-id.{permission}.topic-name
In short, the resolution is to:
Required for #184
The text was updated successfully, but these errors were encountered: