search

18F / dol-whd-14c

The 14(c) system will become a modern, digital-first service. Applicants will be provided an intuitive online experience, guiding them through the information needed to complete their application correctly.
Other
16 stars 17 forks source link

Security: API - Before performing a database retrieve or update operation verify if the logged in user is authorized. #773

Closed PrabhakarThummalaDOL closed 6 years ago

PrabhakarThummalaDOL commented 6 years ago

  1. Submit() *

  2. GetApplication() - done

  3. GetApplicationsSummary()

  4. ChangeApplicationStatus() - done

  5. GetApplicationDocument() - done

  6. DownloadApplicationDocument() - done

    • [x] Account Controller

  7. Register()

  8. UserInfo() *

  9. SetUserEmployer()

  10. CreateOrUpdateEmployerApplication() *

  11. ResetPassword()

  12. VerifyResetPassword()

  13. ChangePassword()

  14. VerifyEmail()

  15. VerifyReactivateAccount()

  16. Logout()

  17. GetAccounts() - done

  18. GetSingleAccount()

  19. GetRoles()

  20. CreateAccount() - done

  21. ModifyAccount() - done

  22. PasswordComplexityCheck()

  23. SendAuthenticationCode()

  24. AccountAdminResendConfirmationEmail() *

  25. AccountAdminResetPassword() *

  26. AccountAdminResendAuthenticationCode() *

  1. Post() ~SubmitApplication *
  2. Download() *
  3. Delete() *
  1. Get()
  1. GetSave() *
  2. AddSave() *
  3. UpdateSave() *
  4. DeleteSave() *
  5. ClearApplicationData() *
  1. GetStatuses()
  1. GetSupportedFileTypes()
  1. GetCreatedUsers() - done
  2. GetUpdatedUsers()- done
  3. GetActiveUsers()- done
  4. GetInactiveUsers()- done
  5. GetDeletedUsers()- done
  6. GetUserActivity()- done
  7. GetRoleActivity()- done
  8. GetRoleLoginActivity()- done
  9. GetUserLoginActivity()- done
EStriegel commented 6 years ago

Confirmed 9/6. Closed.