RPC API documentation v45.0.0

Get all groups of managers (authorizedGroups) for complementaryObject and role.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getAdminGroups

• see URL structure

Example params

{ "role" : "text" , "complementaryObjectId" : 18 , "complementaryObjectName" : "text" }

• see Passing params

Example response

[ { "id" : 1061 , "name" : "My group" , "shortName" : "My group" , "description" : "My testing group" , "parentGroupId" : null , "voId" : 201 , "uuid" : "31e1014b-e994-4cb2-b238-e32aeef87670" , "beanName" : "Group" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all valid user administrators (for group-based rights, status must be VALID for both Vo and group) for complementary object and role.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getAdmins

• see URL structure

Example params

{ "role" : "text" , "complementaryObjectId" : 7 , "complementaryObjectName" : "text" , "onlyDirectAdmins" : true }

• see Passing params

Example response

[ { "firstName" : "Some" , "lastName" : "Body" , "middleName" : null , "titleBefore" : "Mgr." , "titleAfter" : null , "serviceUser" : false , "sponsoredUser" : false , "specificUser" : false , "majorSpecificType" : "NORMAL" , "id" : 34 , "uuid" : "5e5a02dd-f991-4706-a428-69c3ea6c5ce8" , "beanName" : "User" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Return all loaded perun policies.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getAllPolicies

• see URL structure

Example response

{ ... TODO ... }

• see Return values
• see HTTP return codes

Return all loaded roles management rules.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getAllRolesManagementRules

• see URL structure

Example response

{ ... TODO ... }

• see Return values
• see HTTP return codes

Get all Facilities where the given user has set one of the given roles or the given user is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getFacilitiesWhereUserIsInRoles

• see URL structure

Example params

{ "user" : 57 , "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 24 , "name" : "host.facility.cz" , "description" : "is optional" , "beanName" : "Facility" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all Facilities where the given principal has set one of the given roles or the given principal is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getFacilitiesWhereUserIsInRoles

• see URL structure

Example params

{ "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 24 , "name" : "host.facility.cz" , "description" : "is optional" , "beanName" : "Facility" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns list of group's role names. Perun system uses role names in the upper case format. However, for now, they are converted to the lower case format because of the compatibility with external systems.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getGroupRoleNames

• see URL structure

Example response

[ "groupadmin" , "self" , "voadmin" ]

• see Return values
• see HTTP return codes

Returns all roles as an AuthzRoles object for a given group.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getGroupRoles

• see URL structure

Example params

{ "groupId" : 77 }

• see Passing params

Example response

{"FACILITYADMIN":{"Facility":[3682,3826]},"GROUPADMIN":{"Group":[9082,12093],"Vo":[3794,201]}, "VOADMIN":{"Vo":[2561,1541,2061,1041,3601]}}

• see Return values
• see HTTP return codes

Get all Groups where the given user has set one of the given roles or the given user is a member of an authorized group with such roles. Method does not return subgroups of the fetched groups.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getGroupsWhereUserIsInRoles

• see URL structure

Example params

{ "user" : 74 , "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 1061 , "name" : "My group" , "shortName" : "My group" , "description" : "My testing group" , "parentGroupId" : null , "voId" : 201 , "uuid" : "31e1014b-e994-4cb2-b238-e32aeef87670" , "beanName" : "Group" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all Groups where the given principal has set one of the given roles or the given principal is a member of an authorized group with such roles. Method does not return subgroups of the fetched groups.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getGroupsWhereUserIsInRoles

• see URL structure

Example params

{ "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 1061 , "name" : "My group" , "shortName" : "My group" , "description" : "My testing group" , "parentGroupId" : null , "voId" : 201 , "uuid" : "31e1014b-e994-4cb2-b238-e32aeef87670" , "beanName" : "Group" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns User which is associated with credentials used to log-in to Perun.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getLoggedUser

• see URL structure

Example response

{ "firstName" : "Some" , "lastName" : "Body" , "middleName" : null , "titleBefore" : "Mgr." , "titleAfter" : null , "serviceUser" : false , "sponsoredUser" : false , "specificUser" : false , "majorSpecificType" : "NORMAL" , "id" : 34 , "uuid" : "5e5a02dd-f991-4706-a428-69c3ea6c5ce8" , "beanName" : "User" }

• see Return values
• see HTTP return codes

Get all Members where the given user has set one of the given roles or the given user is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getMembersWhereUserIsInRoles

• see URL structure

Example params

{ "user" : 41 , "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 12 , "userId" : 34 , "voId" : 42 , "sourceGroupId" : null , "membershipType" : "DIRECT" , "status" : "VALID" , "sponsored" : false , "beanName" : "Member" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all Members where the given principal has set one of the given roles or the given principal is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getMembersWhereUserIsInRoles

• see URL structure

Example params

{ "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 12 , "userId" : 34 , "voId" : 42 , "sourceGroupId" : null , "membershipType" : "DIRECT" , "status" : "VALID" , "sponsored" : false , "beanName" : "Member" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns PerunPrincipal object associated with current session. It contains necessary information, including user identification, authorization and metadata. Each call of this method refresh the session including authorization data.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getPerunPrincipal

• see URL structure

Example response

{ ... TODO ... }

• see Return values
• see HTTP return codes

Returns list of caller's role names. Perun system uses role names in the upper case format. However, for now, they are converted to the lower case format because of the compatibility with external systems.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getPrincipalRoleNames

• see URL structure

Example response

[ "groupadmin" , "self" , "voadmin" ]

• see Return values
• see HTTP return codes

Get all Resources where the given user has set one of the given roles or the given user is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getResourcesWhereUserIsInRoles

• see URL structure

Example params

{ "user" : 1 , "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 493 , "name" : "host1.host.cz" , "description" : "ROOT access to host1.host.cz" , "facilityId" : 24 , "voId" : 21 , "uuid" : "542d676f-99b2-4d1c-bc80-a46fd7f34e62" , "beanName" : "Resource" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all Resources where the given principal has set one of the given roles or the given principal is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getResourcesWhereUserIsInRoles

• see URL structure

Example params

{ "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 493 , "name" : "host1.host.cz" , "description" : "ROOT access to host1.host.cz" , "facilityId" : 24 , "voId" : 21 , "uuid" : "542d676f-99b2-4d1c-bc80-a46fd7f34e62" , "beanName" : "Resource" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all valid richUser administrators (for group-based rights, status must be VALID for both Vo and group) for complementary object and role with specified attributes.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getRichAdmins

• see URL structure

Example params

{ "role" : "text" , "complementaryObjectId" : 59 , "complementaryObjectName" : "text" , "specificAttributes" : [ "text" , "text" ] , "onlyDirectAdmins" : true , "allUserAttributes" : true }

• see Passing params

Example response

[ { "firstName" : "Some" , "lastName" : "Body" , "middleName" : null , "titleBefore" : "Mgr." , "titleAfter" : null , "serviceUser" : false , "sponsoredUser" : false , "specificUser" : false , "majorSpecificType" : "NORMAL" , "id" : 34 , "uuid" : "5e5a02dd-f991-4706-a428-69c3ea6c5ce8" , "beanName" : "RichUser" , "userExtSources" : [ { "userId": 34 , "loa" : 0 , "extSource" : { "name" : "PERUNPEOPLE" , "type" : "cz.metacentrum.perun.core.impl.ExtSourceSql" , "attributes" : {} , "id" : 2 , "beanName" : "ExtSource" } , "login" : "my_login" , "persistent" : true , "id" : 312 , "lastAccess" : "2019-06-10 14:07:42.2767" , "beanName" : "UserExtSource" } , {...} , {...} ], "userAttributes" : [ { "value" : "my_login" , "type" : "java.lang.String" , "entity" : "user" , "namespace" : "urn:perun:user:attribute-def:def" , "friendlyName" : "login-namespace:perun" , "writable" : true , "baseFriendlyName" : "login-namespace" , "friendlyNameParameter" : "perun" , "unique" : false , "displayName" : "Login in namespace: perun" , "description" : "Logname in namespace 'perun'." , "id" : 1905 , "beanName" : "Attribute" } ] } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns map of role name and map of corresponding role complementary objects (perun beans) distinguished by type. together with list of authorized groups where user is member: Map< RoleName, Map< BeanName, Map< BeanID, List >>>

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getRoleComplementaryObjectsWithAuthorizedGroups

• see URL structure

Example params

{ "userId" : 90 }

• see Passing params

Example response

{ ... TODO ... }

• see Return values
• see HTTP return codes

Get all SecurityTeams where the given user has set one of the given roles or the given user is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getSecurityTeamsWhereUserIsInRoles

• see URL structure

Example params

{ "user" : 65 , "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 924 , "name" : "CSIRT" , "description" : "My CSIRT" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all SecurityTeams where the given principal has set one of the given roles or the given principal is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getSecurityTeamsWhereUserIsInRoles

• see URL structure

Example params

{ "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 924 , "name" : "CSIRT" , "description" : "My CSIRT" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns all roles assigned to user except for those obtained from membership in authorized groups as an AuthzRoles object. Returns also sponsorship and membership roles. Behaves differently for PERUNADMIN and other principals. For PERUNADMIN, PERUNOBSERVER and SELF on the user returns all roles of the given user. For other principals the roles are filtered only to those that the caller can read.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getUserDirectRoles

• see URL structure

Example params

{ "userId" : 39 }

• see Passing params

Example response

{"FACILITYADMIN":{"Facility":[32]},"SELF":{"Member":[4353,12324],"User":[2552,2252]}, "SPONSOR":{"SponsoredUser":[54750]},"VOADMIN":{"Vo":[356]},"PERUNADMIN":{}}

• see Return values
• see HTTP return codes

Returns list of user's role names. Perun system uses role names in the upper case format. Does not include membership and sponsorship role. However, for now, they are converted to the lower case format because of the compatibility with external systems.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getUserRoleNames

• see URL structure

Example response

[ "groupadmin" , "self" , "voadmin" ]

• see Return values
• see HTTP return codes

Returns all roles as an AuthzRoles object for a given user. Returns also sponsorship and membership roles. Behaves differently for PERUNADMIN and other principals. For PERUNADMIN, PERUNOBSERVER and SELF on the user returns all roles of the given user. For other principals the roles are filtered only to those that the caller can read.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getUserRoles

• see URL structure

Example params

{ "userId" : 20 }

• see Passing params

Example response

{"FACILITYADMIN":{"Facility":[32]},"SELF":{"Member":[4353,12324],"User":[2552,2252]}, "SPONSOR":{"SponsoredUser":[54750]},"VOADMIN":{"Vo":[356]},"PERUNADMIN":{}}

• see Return values
• see HTTP return codes

Returns roles resulting from membership in authorized groups as an AuthzRoles object for a given user.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getUserRolesObtainedFromAuthorizedGroupMemberships

• see URL structure

Example params

{ "userId" : 60 }

• see Passing params

Example response

{"FACILITYADMIN":{"Facility":[32]},"SELF":{"Member":[4353,12324],"User":[2552,2252]}, "SPONSOR":{"SponsoredUser":[54750]},"VOADMIN":{"Vo":[356]},"PERUNADMIN":{}}

• see Return values
• see HTTP return codes

Get all Vos where the given user has set one of the given roles or the given user is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getVosWhereUserIsInRoles

• see URL structure

Example params

{ "user" : 84 , "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Get all Vos where the given principal has set one of the given roles or the given principal is a member of an authorized group with such roles.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/getVosWhereUserIsInRoles

• see URL structure

Example params

{ "roles" : [ "text" , "text" ] }

• see Passing params

Example response

[ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns 1 if User has Facility manager role (FACILITYADMIN) for specific Facility defined by ID.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isFacilityAdmin

• see URL structure

Example params

{ "facility" : 30 }

• see Passing params

Example response

1

• see Return values
• see HTTP return codes

Returns 1 if User has Facility manager role (FACILITYADMIN).

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isFacilityAdmin

• see URL structure

Example response

1

• see Return values
• see HTTP return codes

Returns 1 if User has Group manager role (GROUPADMIN) for specific Group defined by ID.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isGroupAdmin

• see URL structure

Example params

{ "group" : 23 }

• see Passing params

Example response

1

• see Return values
• see HTTP return codes

Returns 1 if User has Group manager role (GROUPADMIN).

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isGroupAdmin

• see URL structure

Example response

1

• see Return values
• see HTTP return codes

Checks the facilities and returns those in which group is the last admin

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isGroupLastAdminInFacilities

• see URL structure

Example params

{ "group" : 66 , "facilities" : [ 97 , 77 ] }

• see Passing params

Example response

[ { "id" : 24 , "name" : "host.facility.cz" , "description" : "is optional" , "beanName" : "Facility" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Checks the vos and returns those in which group is the last admin

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isGroupLastAdminInVos

• see URL structure

Example params

{ "group" : 29 , "vos" : [ 29 , 23 ] }

• see Passing params

Example response

[ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns 1 if User has Perun admin role (perunadmin).

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isPerunAdmin

• see URL structure

Example response

1

• see Return values
• see HTTP return codes

Checks the facilities and returns those in which user is the last admin

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isUserLastAdminInFacilities

• see URL structure

Example params

{ "user" : 99 , "facilities" : [ 97 , 61 ] }

• see Passing params

Example response

[ { "id" : 24 , "name" : "host.facility.cz" , "description" : "is optional" , "beanName" : "Facility" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Checks the vos and returns those in which user is the last admin

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isUserLastAdminInVos

• see URL structure

Example params

{ "user" : 76 , "vos" : [ 19 , 63 ] }

• see Passing params

Example response

[ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ]

• see Return values
• see HTTP return codes

Returns 1 if User has VO manager role (VOADMIN) for specific VO defined by ID.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isVoAdmin

• see URL structure

Example params

{ "vo" : 66 }

• see Passing params

Example response

1

• see Return values
• see HTTP return codes

Returns 1 if User has VO manager role (VOADMIN).

Example URL

https://[hostname]/krb/rpc/json/authzResolver/isVoAdmin

• see URL structure

Example response

1

• see Return values
• see HTTP return codes

Returns "OK" string. Helper method for GUI check if connection is alive.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/keepAlive

• see URL structure

Example response

"OK"

• see Return values
• see HTTP return codes

Load perun roles and policies from the configuration file perun-roles.yml. Roles are loaded to the database and policies are loaded to the PerunPoliciesContainer.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/loadAuthorizationComponents

• see URL structure

Example response

null

• see Return values
• see HTTP return codes

Set role for user and complementaryObject. If some complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObject param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "user" : 69 , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for user and complementaryObjects. If some complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObjects param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "user" : 70 , "complementaryObjects" : [ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for user. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "user" : 15 }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for authorizedGroup and complementaryObject. If some complementaryObject is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObject param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroup" : 23 , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for authorizedGroup and complementaryObjects. If some complementaryObject is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObjects param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroup" : 88 , "complementaryObjects" : [ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for authorizedGroup. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroup" : 99 }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for users and complementaryObject. If complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementary object. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "users" : [ 3 , 39 ] , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for users. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "users" : [ 73 , 60 ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for authorizedGroups and complementaryObject. If complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementary object. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroups" : [ 86 , 44 ] , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Set role for authorizedGroups. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/setRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroups" : [ 45 , 49 ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Check if some valid user with specific role exists for given complementary object (for group-based rights, status must be VALID for both Vo and group).

Example URL

https://[hostname]/krb/rpc/json/authzResolver/someAdminExists

• see URL structure

Example params

{ "role" : "text" , "complementaryObjectId" : 21 , "complementaryObjectName" : "text" , "onlyDirectAdmins" : true }

• see Passing params

Example response

{ ... TODO ... }

• see Return values
• see HTTP return codes

Unset role for user and complementaryObject. If some complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObject param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "voadmin" , "user" : 91 , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for user and complementaryObjects. If some complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObjects param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "voadmin" , "user" : 52 , "complementaryObjects" : [ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for user. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "user" : 28 }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for authorizedGroup and complementaryObject. If some complementaryObject is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObject param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "voadmin" , "authorizedGroup" : 19 , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for authorizedGroup and complementaryObjects. If some complementaryObject is wrong for the role, throw an exception. For role "perunadmin" ignore complementaryObjects param. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "voadmin" , "authorizedGroup" : 95 , "complementaryObjects" : [ { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } , {...} , {...} ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for authorizedGroup. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroup" : 25 }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for users and complementaryObject. If complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementary object. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "users" : [ 9 , 12 ] , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for users. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "users" : [ 42 , 1 ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for authorizedGroups and complementaryObject. If complementary object is wrong for the role, throw an exception. For role "perunadmin" ignore complementary object. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroups" : [ 47 , 69 ] , "complementaryObject" : { "id" : 123 , "name" : "My testing VO" , "shortName" : "test_vo" , "beanName" : "Vo" } }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes

Unset role for authorizedGroups. IMPORTANT: Refresh authz only if user in session is affected.

Example URL

https://[hostname]/krb/rpc/json/authzResolver/unsetRole

• see URL structure

Example params

{ "role" : "VOADMIN" , "authorizedGroups" : [ 39 , 71 ] }

• see Passing params

Example response

null

• see Return values
• see HTTP return codes