US-EPA-CAMD / easey-ui

Project Management repo for EPA Clean Air Markets Division (CAMD) Business Suite of applications
MIT License
0 stars 0 forks source link

Add cert statement check on login #6344

Open mark-hayward-erg opened 2 months ago

mark-hayward-erg commented 2 months ago

If a user attempts to log in to ECMPS 2.0, and that user has unsigned CAMDBS certification statements, the user should not be allowed to login to ECMPS 2.0. In this situation. the user should be shown the message "You have not signed all of the necessary certification statements which are associated with your responsibilities as a representative or agent. Until these certification statements have been signed, you will not be able to log in to ECMPS. Please use the CAMD Business System to sign all of your required certification statements."

The CBS permissions API will be updated (see https://camddevelopment.atlassian.net/browse/EASEY-420) to contain an additional "missingCertificationStatements" element. If "missingCertificationStatements" is "true", then the user's ECMPS 2.0 login attempt should fail, and they should see the above message. If "missingCertificationStatements" is "false", then the the ECMPS 2.0 login attempt should proceed normally.

NOTE: We should also update the logic used when permissions are mocked to return "true" (or assume "true") for all users.

Acceptance Criteria:

Sample API Responses

mark-hayward-erg commented 2 months ago

Testing will be blocked by https://camddevelopment.atlassian.net/browse/EASEY-420