Allow "non-owner staff" to GET lists of all 3 tables; allow "non-manager" providers to GET lists for the dataset-providers and end-users tables

VEuPathDB / service-dataset-access

Apache License 2.0

0 stars 2 forks source link

Closed jtlong3rd closed 3 years ago

jtlong3rd commented 3 years ago

More specifically:

GET requests to /staff should be permitted for all staff, not just owners
GET requests to /dataset-providers?datasetId=DATASET_ID should be permitted for all staff and providers, not just owners and managers

Foxcapades commented 3 years ago

Shifted to bug because this was in the amended requirements, but was missed when updating to meet those requirements.