"what metadata are you using"

[Cantor, Scott]

On 5/28/14, 2:30 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>That was the main thing I was going for, something that would be
>dynamically updateable without restarting.

Right, but a file-based approach also works with our service facades, it
just doesn't reload instantly (though I would really like it if we could
add endpoints to force reloads of specific services, so we kind of need to
do that anyway, at which point this is really trivial to implement as a
service).

>Short of something updateable stored in-memory, the only other thing I
>can think of at the moment is to just store the rules in a flatfile, and
>have the authZ code read it in on every request.

Yes, but s/flatfile/Spring beans, and behind a ReloadableService so the
calling code just does very simple things.

This is really easy to expose as a service interface, and we get
reloadability for free with that.

I'm basically thinking of named policies that run against the servlet
request, and you just configure the component protected with a policy name
and inject the authz service and it just runs the policy via the service.

-- Scott