☜	OMI - Authorization Draft MDC Standard					☞

4.5.5 Authorization

OMI supports authorization, the determination that the user has authority for the requested operation. The method encompasses most M[UMPS] implementations of authorization (see A.1).

The agent shall include a user ID and a group ID in each request. Both identifiers shall pertain to the server, that is, the agent shall translate its implementation’s identifiers to the server’s identifiers.

NOTE – A different translation may be necessary for each server.

The server shall test the request’s user ID and group ID for authorization to perform the requested operation on the object of the request. If either the user ID or the group ID passes the test, then the request is authorized.

The server shall not perform an unauthorized request, but shall return an authorization exception response.

Copyright © Standard Documents; 1977-2024 MUMPS Development Committee;
Copyright © Examples: 1995-2024 Ed de Moel;
Copyright © Annotations: 2003-2008 Jacquard Systems Research
Copyright © Annotations: 2008-2024 Ed de Moel.

Some specifications are "approved for inclusion in a future standard". Note that the MUMPS Development Committee cannot guarantee that such future standards will indeed be published.

This page most recently updated on 14-Nov-2023, 21:46:56.

For comments, contact Ed de Moel (demoel@jacquardsystems.com)