I am new to AzMan, but it seems as though what I am looking for is not possible, but I wanted to get some feedback.
I have a set of Service Methods which I want to secure each method with a single AzMan operation definition. However, these services are shared across many applications. So I consider the service methods as being global, a.k.a. not part of an application.
Each application will be represented in a single AzMan repository as Application. However, building an application Task or Role to include a global operation is not possible, AFAIK. (because you can not define operations at a global level)
One thought was to make a single AzMan application represent the enterprise, and each scope represent a real application. But then, at the scope level, there is no way to define an operation. All tasks and roles under scope would need to include operations from the parent application. This would get very large and difficult to maintain, IMHO.
Has anyone ever tried to tackle this problem, or have any suggestions for how to solve it?
Thanks,
Jeff