New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Secure API #153

Open

gerrycampion opened this issue Feb 8, 2023 · 1 comment

Collaborator

gerrycampion commented Feb 8, 2023

Currently, event though the frontend is restricted, all API functionality is accessible by all CDISCID users.

Acceptance Criteria:

Only users with write permissions (currently this means users in the Core Author Group) should be authorized to perform create, update, delete operations via the api

gerrycampion mentioned this issue

152 create a permission group for users #154

Merged

gerrycampion closed this as completed

gerrycampion reopened this

nickdedonder closed this as not planned

Collaborator Author

gerrycampion commented Jul 8, 2024

@nickdedonder I'm not sure why this was closed. I think it is an important security concern

nickdedonder reopened this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment