[OASIS Issue Tracker] (COEL-26) RPE security analysis suggests MMI & PQI should have seperate access creds

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

    [ https://issues.oasis-open.org/browse/COEL-26?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=61591#comment-61591 ] 

David Snelling commented on COEL-26:
------------------------------------

Folks,

I think we need look across the whole suite from this perspective. For completness, this is where we are now. The new operations we are expecting are reasignment of devices and renaming operators. I've included these as well below. I also included the IDA operations, where I believe they fit. I'm not sure the split is all that clear. Good next round of discussion expected.

- Adding Atoms:
   BAP: POST /atoms.

- Querying data:
   BAP: GET /home
   PQI: POST /query
   PQI: POST /segment
   MMI: GET /service-provider/operators
   MMI: POST /service-provider/consumers
   IDA: POST /Validation

- Create data/state:
   MMI: POST /service-provider/operator
   MMI: POST /operator/consumer
   MMI: POST /operator/device
   IDA: POST /PseudonymousKey 
   IDA: POST /PseudonymousKeyBatch

- Change state:
   MMI: POST /operator/forget
   MMI: POST /operator/reasignDevice
   MMI: POST /service-provider/renameOperator

> RPE security analysis suggests MMI & PQI should have seperate access creds
> --------------------------------------------------------------------------
>
>                 Key: COEL-26
>                 URL: https://issues.oasis-open.org/browse/COEL-26
>             Project: OASIS Classification of Everyday Living (COEL) TC
>          Issue Type: Bug
>            Reporter: Joss Langford
>            Assignee: Joss Langford
>




--
This message was sent by Atlassian JIRA
(v6.2.2#6258)