OpenDACS Authorization Caching
Hello,
I'm using OpenDACS for end-user authentication and permissions check with CBE.
Our application restarts everyday, and we are considering caching the result of the permissions check made when the user logged in.
So when we check the permissions of the user everytime we need to refresh the live data, we don't call the checkSubscription again.
First, I would like to know if this is a valid solution?
Also, I've read that the OpenDACS makes it's own caching. Does this mean that it's not necessary or give any advantage for us to do our own caching?
Thank you,
Best Answer
-
Thank you for reaching out to us.
You can call the AuthorizationAgent::getPeToSubServiceList() method to look up within the Refinitiv Real-Time Data Access Control System, the PE to subservice authorization values that were assigned to the referred to service.
Then, you can call the the AuthorizationAgent::getUserSubServiceList() method to look up within the Refinitiv Real-Time Data Access Control System, the subservice authorization values, known as AIS list, that were assigned to the referred to user based on the supplied handle.
Next, you can develop an application logic to perform CBE permissions checks based on those information.
However, OpenDACS API also generates the DACS usage files used by DACS to generate DACS reports for auditing. Therefore, if you don't use OpenDACS API to check permissions, DACS will not generate the reports for auditing. You may need to contact your DACS administrator or LSEG account team to verify this kind of usage.
0
Answers
-
Thank you for your answer.
I'm not using the getPeToSubServiceList nor getUserSubServiceList, my CBE permissions check is being based on the tutorial provided: I create the lock and use CheckSubscription.
But what I was going to do is after I check the permissions, I would cache the result so the application doesn't need to check it everytime I refresh the live data.
Is this a valid solution? And does it give me any advantage, since I've read that OpenDacs does it's own caching?0 -
Okay. You are caching the results so the results are valid as long as the permissions for that user are changed. Technically, it is okay.
However, I am not sure about the auditing process or DACS reports. Please contact your DACS administrator or LSEG account team to verify this kind of usage.
0 -
When you say auditing process, You mean the DACS auditing the user log in?
Because the user would remain logged in I believe, does DACS audits the permission checks as well? Is that what I need to find out?
Regarding the OpenDACS caching, do you know if it has internal caching already?0 -
Sorry, I can't answer questions regarding the auditing process. Please contact your DACS administrator or LSEG account team to answer those questions.
If I remembered correctly, OpenDACS API also have internal cache for DACS user profiles. However, to confirm it, you need to contact the API support team directly via Contact Premium Support.
0
Categories
- All Categories
- 6 AHS
- 37 Alpha
- 161 App Studio
- 4 Block Chain
- 4 Bot Platform
- 16 Connected Risk APIs
- 47 Data Fusion
- 30 Data Model Discovery
- 608 Datastream
- 1.3K DSS
- 577 Eikon COM
- 4.9K Eikon Data APIs
- 7 Electronic Trading
- Generic FIX
- 7 Local Bank Node API
- Trading API
- 2.7K Elektron
- 1.3K EMA
- 236 ETA
- 519 WebSocket API
- 33 FX Venues
- 10 FX Market Data
- 1 FX Post Trade
- 1 FX Trading - Matching
- 12 FX Trading – RFQ Maker
- 5 Intelligent Tagging
- 2 Legal One
- 20 Messenger Bot
- 2 Messenger Side by Side
- 9 ONESOURCE
- 7 Indirect Tax
- 59 Open Calais
- 264 Open PermID
- 39 Entity Search
- 2 Org ID
- PAM
- PAM - Logging
- 8.4K Private Comments
- 6 Product Insight
- Project Tracking
- ProView
- ProView Internal
- 20 RDMS
- 1.4K Refinitiv Data Platform
- 367 Refinitiv Data Platform Libraries
- 3 Refinitiv Due Diligence
- LSEG Due Diligence Portal API
- 3 Refinitiv Due Dilligence Centre
- Rose's Space
- 1.1K Screening
- 18 Qual-ID API
- 13 Screening Deployed
- 23 Screening Online
- 10 World-Check Customer Risk Screener
- 990 World-Check One
- 44 World-Check One Zero Footprint
- 45 Side by Side Integration API
- Test Space
- 3 Thomson One Smart
- 1.2K TR Internal
- Global Hackathon 2015
- 2 Specialists Who Code
- 10 TR Knowledge Graph
- 150 Transactions
- 142 REDI API
- 1.7K TREP APIs
- 4 CAT
- 21 DACS Station
- 117 Open DACS
- 1.1K RFA
- 103 UPA
- 172 TREP Infrastructure
- 224 TRKD
- 886 TRTH
- 5 Velocity Analytics
- 5 Wealth Management Web Services
- 59 Workspace SDK
- 9 Element Framework
- 5 Grid
- 13 World-Check Data File
- Yield Book Analytics
- 46 中文论坛