Security Permissions

Configured Permissions can be found in the Admin portal under Permissions.

Context Namespaces

Context Namespace Description
dk.realequity.actor Only the user that were given specific access to the Datanode will have access to the Datanode.
dk.realequity.rg Any user that have access to the Resource Group that Owns the Datanode will have access to the Datanode.
dk.realequity.datastore Any user that have access to a Resource Group that uses the same Datastore will have access to the Datanode.
dk.realequity.tenant Any user coming from the same Tenant as the Owner will have access to the Datanode.
dk.realequity.rg.chain Any user in the Chain Resource Group that the Owners Resource Group is a member of will have access to the Datanode.
dk.realequity.rg.chain.member Any user in any Resource Group that is a member of the same Chain as the Owners Resource Group will have access to the Datanode.
dk.realequity.actor.any Any known user of the system will have access to the Datanode.
dk.realequity.actor.anonymous Anyone can access the Datanode, even if the user is not logged in.

Get current permissions for a Datanode

You can use the Get permissions endpoint to know what permissions have been set on a Datanode.

GET {{api}}/api/tenants/{{tenantId}}/resourcegroups/{{resourceGroupId}}/datanodes/{{datanodeId}}/permissions

Setting permissions on a Datanode

Permissions can be set on a Datanode by calling the following endpoint:

POST {{api}}/api/tenants/{{tenantId}}/resourcegroups/{{resourceGroupId}}/datanodes/{{datanodeId}}/permissions

Properties

The following properties can be used when adding Permissions to a Datanode.

Property Type Description
permissions Array of Permission The array of Permissions that need to be added.

Permission Properties:

Property Type Description
referenceId Guid An id to a resource in RealEquity. Could be a Datanode Id as an example
permissionNamespace string The namespace of the Security Permissions. See Permissions for configuration.
contextNamespace string The namespace of the sharing level.
contextId string The Id that defines the context. of who have access
handlerId string Any string representing a handler id, that can later be used to know what handler created the permission.

Removing permissions from a Datanode

DELETE {{api}}/api/tenants/{{tenantId}}/resourcegroups/{{resourceGroupId}}/datanodes/{{datanodeId}}/permissions/{{permissionId}}