"what metadata are you using"

[Brent Putman]

On 5/28/14 2:21 PM, Cantor, Scott wrote:
>  I didn't want it to be a servlet because of the need to touch
> web.xml,

No, that would suck.  Way too much work.

>  and I don't really know anything about Spring MVC.

You'll be shocked at how easy it is.  It's actually a really nice web
framework, IMHO.

> That works, but I'm not sure if it's worth the effort compared to building
> a simple service facade, which we already have lots of examples of. The
> main advantage would probably be the efficiency of updates taking effect.


That was the main thing I was going for, something that would be
dynamically updateable without restarting.

Short of something updateable stored in-memory, the only other thing I
can think of at the moment is to just store the rules in a flatfile, and
have the authZ code read it in on every request.  Or at least, read it
when the file timestamp has changed, storing last read timestamp.  That
would be easy, I suppose, albeit less efficient.  I doubt we'd expect a
lot of traffic on such endpoints though, so efficiency not a problem.