Access to AMBIT web services can be controlled via OpenTox Authentication and Authorization infrastructure. Security tokens are obtained after log in into the OpenAM service at http://opensso.in-silico.ch/auth/authenticate.
Code
Java OpenTox AA client library is available.
Accounts
OpenTox user accounts can be obtained via free registration at OpenTox site.
Logging in
curl -X POST -d "username=YOUR-OPENTOX-USER" -d "password=YOUR-OPENTOX-PASSWORD" \
http://opensso.in-silico.ch/auth/authenticate
AMBIT services offer log in via its web page.
The relevant link for a local installation is http://yourhost:8080/ambit2/opentoxuser.
Protecting resources
After deploying AA enabled AMBIT services, /dataset resources are not accessible. An access policy has to be defined, as explained below.
Navigate to http://localhost:8080/ambit2/admin/policy and use the web interface to create new policies. Replace http://localhost:8080 with your real URI!
Alternatively, use OpenTox API or the Java library above.
On data upload the new datasets are assigned a default policy, allowing read write access only to the user, who has uploaded the dataset. Additional policies can be defined as above.