Add access gates on routes. - Githubissues

TromsFylkestrafikk / ragnarok

Harvest public transport data for statistics usage

0 stars 0 forks source link

Add access gates on routes. #40

Closed tfk-kaare closed 1 year ago

tfk-kaare commented 1 year ago

Problem / motivation

We currently do not use access gates on most of the oprations in the ChunkController.

Suggested resolution

Go over all routes and add proper policies or access gates to them.

Remaining tasks

[x] Add permissions per operation
[x] Add permission for batch cancelation
[x] Really use Policies?
[x] Make permissions available client side for rendering components
[x] Add conditional rendering of frontend based on permissions.