...
In the original request, the user would provide a list of accessors, and a renewal would also provide a list of accessors. Per our discussion with the team, renewals will now have three listsa list of different changes to an accessor:
- Accessors to Renew (users that had access before and should continue to have access).
- Accessors to Add (new users that should be added and granted access for the first time).
- Accessors to Revoke (accessors that used to have access but should no longer have access).
...
The submission will have the same three lists list for both first time submission and renewals.
...
- Only submitter can view submission status. Accessors who are not submitter will not be able to see status of submission they did not submit.
- AccessApproval will no longer be deleted. An ACT can revoke all AccessApprovals a user have for a given AccessRequirement. This API is also deprecated and will be removed.
New APIs
| Action | Intended User | URI | Method | Request Params | Request Body | Response Body |
|---|
| 1 | list group of accessors | ACT | /accessApproval/group | POST | GroupAccessorRequest |
| GroupAccessorResponseAccessorGroupRequest | AccessorGroupResponse |
| 2 | revoke group | ACT | /accessApproval/group/revoke | PUT | GroupAccessorRevokeRequest | GroupAccessorRequest |
| AccessorGroupRevokeRequest |
|
| 3 | convert ACTAccessRequirement to ManagedACTAccessRequirement | ACT | /accessRequirement/conversion | PUT |
| AccessRequirementConversionRequest | AccessRequirement |
| 4 | retrieve approval info for user | authenticated users | /accessApproval/information | POST |
| BatchAccessApprovalInfoRequest | BatchAccessApprovalInfoResponse |
| BatchAccessApprovalInfoRequest |
|---|
| String userId |
| List<String> accessRequirementIds |
| BatchAccessApprovalInfoResponse |
|---|
| List<AccessApprovalInfo> results |
| AccessApprovalInfo |
|---|
| String userId |
| String accessRequirementId |
| Boolean hasAccessApproval |
| AccessorGroupRequest |
|---|
| String accessRequirementId |
| String submitterId |
| Date expireBefore |
GroupAccessorResponse| String nextPageToken |
| AccessorGroupResponse |
|---|
| List<GroupAccessor> accessorGroups |
| String nextPageToken |
| AccessorGroup |
|---|
| String accessRequirementId |
| String submitterId |
| List<String> accessors |
GroupAccessorRevokeRequest| Date expiredOn |
| AccessorGroupRevokeRequest |
|---|
| String accessRequirementId |
| String submitterId |
| AccessRequirementConversionRequest |
|---|
| String accessRequirementId |
| String etag |
| Long currentVersion |
