Skip to content
This repository has been archived by the owner on Dec 16, 2024. It is now read-only.

useAuth whitelist dead code #13

Open
apeling opened this issue May 1, 2024 · 1 comment
Open

useAuth whitelist dead code #13

apeling opened this issue May 1, 2024 · 1 comment
Assignees

Comments

@apeling
Copy link
Collaborator

apeling commented May 1, 2024

The new useAuth abandoned the idea of allowing additional user meta data to be consumed via a "whitelist" prop on ProvideAuth context. This code should be removed and / or devise an alternative method for auth middlewares to pass special snowflake permission type data.

Example scenario: User has a permission to see a grid of items. That grid has an action column to "Edit". User may only have permission to edit items x,y, and z based on some other group/org based assignment. UI would need some way to decipher if an edit button would be rendered for a given item row.

@bryantqo
Copy link
Contributor

Instead of a whitelist could we just give access to all the claims on the id token? Alternatively we can create a change on the permission filter component to dictate a function to determine permission over always grabbing from the access control list.

@bryantqo bryantqo self-assigned this May 24, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants