Using entitlement certificates to manage product assets

A system comprising:

• a memory to store one or more product repositories;
• and
• a processing device coupled to the memory to:
• receive a request from a client computing system to access one of the product repositories, the request comprising:
• an entitlement certificate comprising an attribute object identifier, and
• a uniform resource locator (URL) identifying a location in the one product repository that the client is authorized to access,
• map the attribute object attribute identifier with the URL,
• determine whether the URL in the request partially matches a URL comprising a wildcard variable in the entitlement certificate in view of the map of the attribute object attribute identifier with the URL and in view of a matching rule that uses the wildcard variable,
• determine that the entitlement certificate is not revoked,
• grant the client computing system access to the one product repository in response to a determination that the URL in the request partially matches a URL in the entitlement certificate and in response to the determine that the entitlement certificate is not revoked, and
• send a message to the client computing system indicating that the URL in the request does not partially match the URL in the entitlement certificate in response to the determination that the URL in the request does not partially match the URL in the entitlement certificate.

A non-transitory computer-readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

• receiving, by the processing device, a request from a client to access a product repository that is coupled to the processing device, the request comprising:
• an entitlement certificate comprising an attribute object identifier, and
• a uniform resource locator (URL) identifying a location in the product repository that the client is authorized to access;
• mapping the attribute object identifier with the URL;
• determining, by the processing device, whether the URL in the request partially matches a URL comprising a wildcard variable in the entitlement certificate in view of the mapping of the attribute object attribute identifier with the URL and in view of a matching rule that uses the wildcard variable;
• determining that the entitlement certificate is not revoked;
• granting, by the processing device, the client access to the product repository in response to a determination that the URL in the request partially matches a URL in the entitlement certificate and in response to the determining that the entitlement certificate is not revoked;
• and
• sending a message to the client indicating that the URL in the request does not partially match the URL in the entitlement certificate in response to the determination that the URL in the request does not partially match the URL in the entitlement certificate.