Implement fine grained privileges #188
Labels
enhancement
New feature or request
Milestone
Comments
bfabio
added a commit
to bfabio/developers-italia-api
that referenced
this issue
Mar 7, 2024
SECURITY NOTE: This doesn't implement any authorization on resources, which is good *for now* as you either have the ability to write to resources or not have it. That MUST be implemented when there will be multiple write tokens with different scopes. (See italia#188)
bfabio
added a commit
to bfabio/developers-italia-api
that referenced
this issue
Mar 9, 2024
Implement JSON Patch (https://datatracker.ietf.org/doc/html/rfc6902) for Software resource and bump the json-patch library. SECURITY NOTE: This doesn't implement any authorization on resources, which is good *for now* as you either have the ability to write to resources or not have it. That MUST be implemented when there will be multiple write tokens with different scopes. (See italia#188)
bfabio
added a commit
to bfabio/developers-italia-api
that referenced
this issue
Mar 9, 2024
Implement JSON Patch (https://datatracker.ietf.org/doc/html/rfc6902) for Software resource and bump the json-patch library. SECURITY NOTE: This doesn't implement any authorization on resources, which is good *for now* as you either have the ability to write to resources or not have it. That MUST be implemented when there will be multiple write tokens with different scopes. (See italia#188)
bfabio
added a commit
to bfabio/developers-italia-api
that referenced
this issue
Mar 9, 2024
Implement JSON Patch (https://datatracker.ietf.org/doc/html/rfc6902) for Software resource and bump the json-patch library. SECURITY NOTE: This doesn't implement any authorization on resources, which is good *for now* as you either have the ability to write to resources or not have it. That MUST be implemented when there will be multiple write tokens with different scopes. (See italia#188)
bfabio
added a commit
to bfabio/developers-italia-api
that referenced
this issue
Mar 9, 2024
Implement JSON Patch (https://datatracker.ietf.org/doc/html/rfc6902) for Software resource and bump the json-patch library. SECURITY NOTE: This doesn't implement any authorization on resources, which is good *for now* as you either have the ability to write to resources or not have it. That MUST be implemented when there will be multiple write tokens with different scopes. (See italia#188)
bfabio
added a commit
that referenced
this issue
Mar 9, 2024
Implement JSON Patch (https://datatracker.ietf.org/doc/html/rfc6902) for Software resource and bump the json-patch library. SECURITY NOTE: This doesn't implement any authorization on resources, which is good *for now* as you either have the ability to write to resources or not have it. That MUST be implemented when there will be multiple write tokens with different scopes. (See #188)
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
The bearer tokens should support scoping at creation time to limit the token's permission just to certain actions.
The text was updated successfully, but these errors were encountered: