Control tiles in API CATALOG

[GilPen]

Hello

May I suggest to control which tiles I would like to display in the API CATALOG ?
For our example; we would like to display only our own API developements for our users and not expose Z/OSMF services or caching services in the swagger.

Regards
Gilles

[balhar-jakub]

Yes, we would like to provide this functionality. For now the requests that are touching the authorization are stored in this issue: #3188

Specifically I believe that this part of the problem statement is covering the topic:

• as well as showing the service in the catalog directly based on these privileges.

The question is the actual timeline to deliver this one and I don't have the answer right now. What would help me is to understand whether this missing capability is preventing you from having the API Mediation Layer in production environment.

[GilPen]

Hello

ZOWE is not running on production environment right now. We are running ZOWE on development and pre-production environment.

In future when ZOWE will be more stable, we plan to expose our APIs from a front server only.

Regards
Gilles

[dkelosky]

In future when ZOWE will be more stable, we plan to expose our APIs from a front server only.

Thanks for engaging in this thread @GilPen - can you share some of the issues you ran into that demonstrate a lack of stability within zowe?

[balhar-jakub]

For the authorization capabilities and with the current work on us we won't get to them before the beginning of CY 25. I am dorry about that.

[GilPen]

Hello

The stability problem especially occurs when we want to upgrade zowe using SMPE.

For example, last time I upgraded zowe from 2.8 to 2.14 and an abend S0C4 appears in zss components (ticket #523)

Other example I'm interested in using manager component to stop/start my components but the ticket #3178 has been opened in november 30th 2022 ( error message "ZWEL0029E start component list is empty")

Regards
Gillles

[balhar-jakub]

Hi Gilles,

I shared the information work on prioritization. I expect that I will have some idea on when we can get to this functionality sometime next week.

I will reach out with more details on what exactly is needed.

Best regards
Jakub

[dkelosky]

May I suggest to control which tiles I would like to display in the API CATALOG ? For our example; we would like to display only our own API developements for our users and not expose Z/OSMF services or caching services in the swagger.

Since z/OSMF (and other services provide lots of APIs), do you ever foresee a situation where a user might have access to a subset of APIs a service provides? For example, you might grant a user to obtain z/OS job information via the z/OSMF REST API but you may not grant a user access to the z/OS Console REST API via z/OSMF REST API.

Would you expect the tile to not be visible if a user can access only a subset of APIs a service provides?

[GilPen]

Hello

The users can't run the zosmf APIs because our SAF TSS doesn't authorize them.

But we think it's not necessary to display the tile in ZLUX, because users can't run them.

Regards
Gilles