Invocation of admission control is handled by the **APIServer** and not individual **RESTStorage** implementations.
Invocation of admission control is handled by the **APIServer** and not individual **RESTStorage** implementations.
This design assumes that **Issue 297** is adopted, and as a consequence, the general framework of the APIServer request/response flow
This design assumes that **Issue 297** is adopted, and as a consequence, the general framework of the APIServer request/response flow will ensure the following:
will ensure the following:
1. Incoming request
1. Incoming request
2. Authenticate user
2. Authenticate user
3. Authorize user
3. Authorize user
4. If operation=create|update, then validate(object)
4. If operation=create|update|delete|connect, then admission.Admit(requestAttributes)
5. If operation=create|update|delete, then admission.Admit(requestAttributes)
- invoke each admission.Interface object in sequence
a. invoke each admission.Interface object in sequence
5. Case on the operation:
6. Object is persisted
- If operation=create|update, then validate(object) and persist
- If operation=delete, delete the object
- If operation=connect, exec
If at any step, there is an error, the request is canceled.
If at any step, there is an error, the request is canceled.
