Fix GET dataset by ID authorisation check - Githubissues

SciCatProject / backend-v3

SciCat Data Catalogue Backend

https://scicatproject.github.io/documentation/

BSD 3-Clause "New" or "Revised" License

13 stars 17 forks source link

Fix GET dataset by ID authorisation check #683

Closed minottic closed 2 years ago

minottic commented 2 years ago

Description

Should fix #682

Motivation

Loopback filter seems to be ignored when using the dataset/id endpoint. The check now takes place in the afterMethod

Fixes:

common/models/dataset.js change beforeMethod with afterMethod to check if request is authorised

Tests included/Docs Updated?

[x] Included for each change/fix?
[x] Passing? (Merge will not be approved unless this is checked)
[ ] Docs updated?
[ ] New packages used/requires npm install?
[ ] Toggle added for new features?