5.5

Table Of Contents
4 POST the Event element to the organization's events URL.
Example: Add an Event to an Organization's Event Stream
Request:
POST https://vcloud.example.com/api/admin/org/26/events
Content-Type: application/vnd.vmware.admin.event+xml
...
<?xml version="1.0" encoding="UTF-8"?>
<Event
success="true"
serviceNamespace="org.example.vcd.backup"
type="backupComplete">
<Owner
type="application/vnd.vmware.vcloud.org+xml"
name="Finance"
href="https://vcloud.example.com/api/admin/org/26" />
<User
type="application/vnd.vmware.admin.user+xml"
name="bob"
href="https://vcloud.example.com/api/admin/user/39" />
</Event>
Response:
204 No Content
Authorization Framework for Extension Service Operations
All requests to extension services must be authenticated through the vCloud API. Extension services can
participate in vCloud API REST authorization by controlling access to their objects and operations through
new or existing rights and roles.
An extension service that does not enable the use of vCloud Director REST authorization implicitly grants
permission for all users to perform all operations that the service uses. A service can use the native
vCloud Director REST authorization model by taking the following steps:
1 Define resource classes that represent references to service-specific object types.
2 Define resource class actions that specify the actions that are implemented for those object types.
3 Define ACL rules specifying the rights required to perform an operation on objects of a specific type.
Participation in the Authorization Framework
To participate in the authorization framework, a service must include an AuthorizationEnabled element
with a value of true in its registration request.
<vmext:AuthorizationEnabled>true</vmext:AuthorizationEnabled>
It must also define at least one resource class, specify at least one action for that class, and define an ACL
rule that constrains use of the action on the class.
vCloud API Programming Guide
342 VMware, Inc.