dataset details visable without authentication

SciCatProject / backend-v3

SciCat Data Catalogue Backend

https://scicatproject.github.io/documentation/

BSD 3-Clause "New" or "Revised" License

13 stars 17 forks source link

dataset details visable without authentication #682

Closed schluenz closed 2 years ago

schluenz commented 2 years ago

Issue Name

unauthorized dataset metadata access

Summary

A query for a dataset with full id like curl -v -k -X GET http://localhost:3000/api/v3/Datasets/10.3204%2F20190010.11007695.cnk55_90kom_a returns the full dataset metadata without token

Expected Behaviour

I would have expected a "not authorized" response.

Extra Details

the dataset is not published