Access control (AC)

Date Version Description Contributor

25 Oct, 2023 1.0.0 @Eric Le

Models

Data model (TBD)

High level design
Access control: new micro service for checking the privileges has been grant to user’s action

Approval: new micro service to create/ approve request

User: new micro service to manage user system

Customer: new micro service to manage the bank’s customer

Confirmation: new micro service using to transaction signing to confirm a transaction

Sequence Diagram

Get job roles

GET: /api/access-control/role/{userId}

Api specs: API Specs - get roles.xlsx

Check permission

GET: /api/access-control/role/{userId}/{bf_code}/{action_type}

Api specs: API Specs - check permission.xlsx

Assign jobrole to user

POST: /api/access-control/job-role/assign

Api specs: API Specs - Assign jobrole into user.xlsx

Get business funtion list with userId

GET: /api/access-control/{userId}/business-functions

Api specs: API Specs - Get list business function by user id.xlsx
Get business function with bf_code

GET: /api/access-control/business-function/{bf_code}

Api specs: API Specs - Get business function by bf_code.xlsx