SessionAttributes for sessionless calls?

Eric Spiegelberg

The Foldering module currently finds itself in a conundrum. Having found an existing issue with how Foldering is handling infrastructure access controls (IACs), we want to modify Foldering to contact UDS to retrieve each user’s IAC settings; some of this approach is currently in place. This approach works great for calls to Foldering that are session-based. However, Foldering also has valid use cases where it receives sessionless calls. And there in-lines the problem: without a session, we do not have the needed information/credentials to contact UDS and therefore can not get the caller’s IAC’s. Q1) Does anyone have any insight as to how this can best be handled? Q2) Does UDS (or any system) provide any sort of “default” IAC settings?

Diane Swearingen

The UDS processing for IAC's is actually session-less. UDS provides an API for retrieving all Infrastructure Access Controls that exist, and who they are released to. It is up to the caller (usually Website) to whittle down that list to just the IAC's that the user is eligible for. Then Website stores the limited list into SessionBindings and associates it with the session. Foldering could certainly call the UDS IAC endpoint, and make it's own decision about what it would consider a "Default" user (just include IACs released to "ALL-USERS", perhaps?). UDS IAC api is described on this wiki page: [
http://nsawiki.int.westgroup.com/wiki/index.php5/Infrastructure_Access_Controls#Get_All_InfrastructureAccessControls] More details on IACs in general are available on this Hub page:
https://thehub.thomsonreuters.com/docs/DOC-496148