search

FIS2425 / authorization-svc

Authorization microservice for medical consultation application. Handles the authorization of users for the entire application
Apache License 2.0
0 stars 0 forks source link

Fix authorize request middleware #50

Closed alvgonfri closed 3 days ago

alvgonfri commented 5 days ago

Description

Currently, in the authorizeRequest middleware, we are checking the conditions "has permisson on method" and "has permisson on role" separately, but they must be checked together.

With the current permissions, this is not problematic, but it could be in the future if we change the permissions.