Hello. I'd like to make more use of web services and require implementing some kind of user/group authorization.
Would anybody be able to shed any light on the options below:
Syncope seems to the obvious choice with the use of Talend IAM. I've tried very hard to implement this but always find that any user in Syncope can access any web service, despite creating resources and applying a role under the Authorization tab in TAC. Has anyone successfully used this method and restricted the web service to 1 group?
Having read this page it seems to imply that this is expected behaviour: https://community.talend.com/t5/Architecture-Best-Practices-and/How-to-setup-Talend-IAM-for-authenti...
"Deploy the ESB Service in the ESB Runtime and call if, for sample opening its URL in a browser. The browser asks you to log in. You can use any user you created in the Syncope Console to login. The user does not need to be associated with a specific Syncope group"
LDAP - I expect I cannot use the Authorization tab with the LDAD-module applied in Karaf. Would I be right thinking any user in the Active directory would be able to access any web service?
Multiple Karaf ports - I thought about setting up each Web service on a different port in Karaf. I could then set my Iptables list to allow particular IP Addresses to access particular ports. This would work in theory but I'm not sure about how to create multiple ports in Karaf. Can anyone explain how this is done?
Any other suggestions are very much welcome.
Thank you very much.
