Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
themeRDark
GET /api/demo HTTP/1.1
Authorization: Bearer S0VLU0UhIExFQ0tFUiEK

Authorization in Tax Balance

Tax Balance ressource server (in other words: API or backend server) performs an authorization for each incoming request. It extracts the user ID from the OAuth access token and calculates whether the request is allowed for the user based on the stored role and permission definition. If this is not the case, an HTTP status code 403 is returned.

Managing user, roles and permissions

...

Following data is stored in the Portal application and Tax Balance:


PortalTax Balance
Roles
  • Id
  • Name
  • Last modification date
  • Comment
  • Id
  • Date of creation
  • Author of creation
Permissions for role
  • Link from role to permission (only Portal specific permssions)
  • Category
  • Last modification date
  • Link from role to permission (only Tax Balance specific permissions)
  • Date of creation
  • Author of creation
Role to user assignments
  • Link from user to role (on id bases)
  • Last modification date
  • Link from user to role
  • Constraint on a unit persisted in Tax Balance (optional)
  • Date of creation
  • Author of creation

The above mentioned data gets distributed to Tax Balance when specific data ingestion occurs in Portal application. This is the case when a portal user performs the following activities:

...