Having the ability to restrict allowed methods on the gateway based on the user roles in RH-SSO is useful when users wants to restrict certain group of users.
For an example, role=admin can have access to all the GET/POST/PUT/DELETE methods,
but role=user should only have access to GET method.
Is it possible to add this feature to the RH-SSO role check policy
- is documented by
-
THREESCALE-3105 Document role-based access control for HTTP methods using RH-SSO role-check policy
- Closed