authzen
authzen copied to clipboard
Could we (should we) simplify the Action Search API response?
Today, the Search API response looks like this:
{
"results": [
{
"name": "can_read"
},
{
"name": "can_write"
}
],
"page": {
"next_token": ""
}
}
But we could simplify it as
{
"results": [ "can_read", "can_write"],
"page": {
"next_token": ""
}
}
Thoughts?
Sounds smart as Action effectively have no Type nor Id but just a name.
Agreed too, array of string seems sufficient to me.
On the 6/20 ad-hoc meeting, @ggebel @identitymonk and @davidjbrossard agreed that
- to keep the specs as parallel as possible (between subject, resource, and action search)
- to plan for future expansion (e.g. group of actions)
It is better to keep the structure as is. We're closing this issue.