Kinto / kinto

A generic JSON document store with sharing and synchronisation capabilities.
http://docs.kinto-storage.org/
Other
4.32k stars 421 forks source link

Allow for an opt-in feature to show resource owners #3314

Open samj1912 opened 9 months ago

samj1912 commented 9 months ago

This is a feature request to allow for better transparency on who owns certain records and who to reach out to in case a use want to request read/write permissions for a specific resouce.

The following features are proposed -

  1. Enable a new permission type called read:permissions. This allows the appropriate principals to see who has read/write permissions.
  2. If a use has read:permissions records should return back an appropriate 404/403 based on whether they have access to read a resource and if a resource exists or not rather than a 403 in all cases.