Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pool-Auth: Configurable Permission Names #264

Closed
nicoprow opened this issue Jun 10, 2023 · 0 comments
Closed

Pool-Auth: Configurable Permission Names #264

nicoprow opened this issue Jun 10, 2023 · 0 comments

Comments

@nicoprow
Copy link
Contributor

nicoprow commented Jun 10, 2023

Currently the Pool endpoints are secured via fix-named permissions. The Pool properties should offer to configure the name of permissions. Also the BpdmSecurityConfigurerAdapterImpl should secure the endpoints in the following way:

Read Business-Partner Permission: Default "read_pool_partner_data":
Access to all business partner GET endpoints or POST search/filter endpoints (Every access to business partner data and changelog that does not update the data itself.)

Write Business-Partner Permission: Default "change_pool_partner_data":
Access to all business partner endpoints that add or update business partners (POST and PUT endpoints for changing the business partners)

Read Meta-Data Permission: Default "read_meta_data":
Access to all GET meta data endpoints

Write Meta-Data Permission: Default "change_meta_data":
Access to meta data endpoints updating or creating meta data

Opensearch Admin Permission: Default "manage_opensearch":
Access to all endpoints for managing the opensearch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant