DSpace / RestContract

REST Contract for DSpace 7-8
https://wiki.lyrasis.org/display/DSDOC8x/
37 stars 48 forks source link

Script and process endpoints should be open to other than administrators #219

Closed abollini closed 1 year ago

abollini commented 1 year ago

Please describe your request The script and process endpoints state that they are reserved to administrators but indeed we have build feature that have a wider audience on top of them. At the code level there are already some security mechanism restricted "by script" that can be finalized but right now the endpoints are just reserved to admins.

We should allows everyone (authenticated)

Authorization check to start a process should be fully delegated to the involved script so that it can be based on the context (loggedin user) and the parameters that are used to run the script

tdonohue commented 1 year ago

@abollini : Since it looks like you've labeled these as claimed: 4Science, I'm going to assign these 3 related/linked tickets to you & move them to the 7.6 board.