SAP Sponsorships Engine Security Webservices API

URL: /api/restsecurity

Description:

The service obtains or changes the ownership of object, or obtains or changes access control list (ACL) properties of an object.


Change Ownership
Request Method: GET /get_roles_for_user
Output format: a JSON document of the following format
            [
              {
                "role_definition_id": "dc77e3d1-d405-435e-8699-ce7245f6fd7a",
                "role_name": "admin",
                "owning_group_id": "be5c4abd-eeba-472f-8391-51661d2420a1",
                "owning_user_name": null,
                "qualifying_group_id": "be5c4abd-eeba-472f-8391-51661d2420a1",
                "qualifying_username": null,
                "transitive": true
              },
              {
                "role_definition_id": "ad1d5148-b13d-4464-90c4-7c396e4d4e2e",
                "role_name": "user",
                "owning_group_id": null,
                "owning_user_name": "uhl",
                "qualifying_group_id": "a87d046d-4197-4d4a-8882-0baa57599e57",
                "qualifying_username": null,
                "transitive": true
              }
            ]
The owning_group_id and owning_user_name refer to the ownership information for the role association. Typically, this would be the default ownership group of, and the user assigning the role to the receiving user.
Query Parameter:
username
An optional user name, telling the user for which to obtain the role assignments; if not provided, the user of the authenticated subject of the request will be used instead.
Example: curl -H 'Authorization: Bearer MVPg/uCV1QGqMDmDtUuOQBrSrB1NlIldm0LW+dnxZ2A=' https://security-service.sapsailing.com/security/api/restsecurity/get_roles_for_user
Will provide a JSON document as explained above.