Fix formatting of REST authorization URLs

Plus removed information about SOAP authorizations.
Evolveum · Feb 21, 2024 · 0a57bb9 · 0a57bb9
1 parent 0a07e28
commit 0a57bb9
Show file tree

Hide file tree

Showing 14 changed files with 27 additions and 81 deletions.
diff --git a/docs/interfaces/rest/operations/create-op-rest.adoc b/docs/interfaces/rest/operations/create-op-rest.adoc
@@ -78,7 +78,7 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#addObject`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#addObject+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/delete-op-rest.adoc b/docs/interfaces/rest/operations/delete-op-rest.adoc
@@ -42,7 +42,7 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#deleteObject`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#deleteObject+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/generate-and-validate-concrete-op-rest.adoc b/docs/interfaces/rest/operations/generate-and-validate-concrete-op-rest.adoc
@@ -72,8 +72,8 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#generateValue`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#validateValue`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#generateValue+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#validateValue+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/generate-and-validate-op-rest.adoc b/docs/interfaces/rest/operations/generate-and-validate-op-rest.adoc
@@ -67,8 +67,8 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#rpcGenerateValue`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#rpcValidateValue`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#rpcGenerateValue+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#rpcValidateValue+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/get-op-rest.adoc b/docs/interfaces/rest/operations/get-op-rest.adoc
@@ -213,8 +213,8 @@ for your use case*.
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#getObject`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#getSelf`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#getObject+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#getSelf+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/modify-op-rest.adoc b/docs/interfaces/rest/operations/modify-op-rest.adoc
@@ -74,7 +74,7 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#modifyObject`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#modifyObject+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/notify-op-rest.adoc b/docs/interfaces/rest/operations/notify-op-rest.adoc
@@ -18,7 +18,7 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#notifyChange`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#notifyChange+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/resource-op-rest.adoc b/docs/interfaces/rest/operations/resource-op-rest.adoc
@@ -66,8 +66,8 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#testResource`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#importFromResource`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#testResource+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#importFromResource+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/script-execute-op-rest.adoc b/docs/interfaces/rest/operations/script-execute-op-rest.adoc
@@ -70,7 +70,7 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#executeScript`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#executeScript+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/search-op-rest.adoc b/docs/interfaces/rest/operations/search-op-rest.adoc
@@ -70,7 +70,7 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#searchObjects`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#searchObjects+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/shadow-op-rest.adoc b/docs/interfaces/rest/operations/shadow-op-rest.adoc
@@ -66,8 +66,8 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#findShadowOwner`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#importShadow`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#findShadowOwner+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#importShadow+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/task-specific-op-rest.adoc b/docs/interfaces/rest/operations/task-specific-op-rest.adoc
@@ -17,9 +17,9 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#suspendTask`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#resumeTask`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#runTask`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#suspendTask+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#resumeTask+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#runTask+`
 
 == Examples
 

diff --git a/docs/interfaces/rest/operations/user-specific-op-rest.adoc b/docs/interfaces/rest/operations/user-specific-op-rest.adoc
@@ -17,8 +17,8 @@ include::../../rest/concepts/raw/outcome.adoc[]
 
 == Access Authorization
 
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#resetCredential`
-- `http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#getValuePolicy`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#resetCredential+`
+- `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#getValuePolicy+`
 
 == Examples
 

diff --git a/docs/security/authorization/service.adoc b/docs/security/authorization/service.adoc
@@ -10,87 +10,33 @@
 
 [%autowidth]
 |===
-| ID | Action | Allowed access to page
+| ID | Action | Allows access to
 
 | 1
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#all
+| `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#all+`
 | All operations
 
 | 2
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#<operation>
+| `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#<operation>+`
 | Access to specific REST operation.
 The URI fragments of individual operations are present xref:/midpoint/reference/interfaces/rest/operations/[in their description]: on pages devoted to individual operations, e.g., xref:/midpoint/reference/interfaces/rest/operations/search-op-rest/[].
 These authorizations do *not* check for any specific objects, e.g., an object that is going to be retrieved or modified by the operation.
 They are just "yes/no" authorizations for the operation itself.
 
 | 3
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#proxy
+| `+http://midpoint.evolveum.com/xml/ns/public/security/authorization-rest-3#proxy+`
 | Authorizes the xref:/midpoint/reference/interfaces/rest/concepts/authentication/#proxy-impersonation[impersonation].
 
 |===
 
-== Web Service (SOAP) Authorizations
-
-[%autowidth]
-|===
-| ID | Action | Allowed access to page
-
-| 1
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#all
-| All operations
-
-
-| 2
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#getObject
-| getObject operation
-
-
-| 3
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#searchObjects
-| searchObjects operation
-
-
-| 4
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#executeChanges
-| executeChanges operation
-
-
-| 5
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#findShadowOwner
-| findShadowOwner operation
-
-
-| 6
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#testResource
-| testResource operation
-
-
-| 7
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#importFromResource
-| importFromResource operation
-
-
-| 8
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#notifyChange
-| notifyChange operation
-
-
-| 9
-| http://midpoint.evolveum.com/xml/ns/public/security/authorization-ws-3#executeScripts
-| executeScripts operation
-
-|===
-
-
 == Service Authorizations and Object Authorizations
 
-WS or REST authorizations are necessary, but not sufficient condition to allow access to data in midPoint.
+REST authorizations are necessary, but not sufficient condition to allow access to data in midPoint.
 These authorizations are just the "first line" of defense.
 The user needs to have these authorizations to invoke the service operation.
 But this authorization does not give access to any data.
 For practical use-cases the user must also have ordinary (object) authorizations such as _read_, _add_, _modify_ or _delete_ to access any midPoint data.
-Without these authorizations the WS/REST authorizations are almost useless.
-
+Without these authorizations the REST authorizations are almost useless.
 
 == See Also