WSO2数据服务中的多租户Web服务？

Question

I want to build a web service where not every user can see all data. Therefor I need to store data in a multi-tenant fashion.

Quick example: Car dealers.

dealer

• ID
• name
• username

car

• ID
• name
• dealer_id (owned by)

Now the dealer calls the get_my_cars web service with his user credentials and should only see the cars that are owned by him. Something like:

SELECT car.id, car.name
FROM car
JOIN dealer ON car.dealer_id = dealer.id
WHERE dealer.username = %CURRENT_WEBSERVICE_USER%

But how do I get the %CURRENT_WEBSERVICE_USER% variable into the MySQL query? Or am I doing something horribly wrong here? How else would you filter data so everyone can only see his own data?

Thanks for your replies!

Answer 1

Your usecase is not a multitenant usecase. What you need is to write a webservice(dataservice) and secure it with usernametoken/basicauth. When an user calls that service with his credientials, you need to query the database and return back the results. Simple secured webservice is what you need.