DIRACGrid/DIRAC — Issue #252: RSS scripts
Author: fstagni
Created: 2011-10-25 08:43:09+00:00
State: open

(from an old comment by Ricardo)

In the scripts there's an explicit check of user groups. This is not very nice (anyone can copy the file, remove the
lines and go ahead). It would be better to set the proper authorization in the corresponding server methods and remove these
lines. At the same time this will make the code more portable for other VOs.

The authorization should be based on the Properties defined (new ones can be defined if necessary) and can be set in the CS on a per method base. The client will get a generic not authorized error. Alternatively you can put the check at the entrance of the server methods if you want a finer control of the error returned.

Please assign this to Vincent.