adamkewley / jobson

A platform for transforming command-line applications into a job service.
Apache License 2.0
256 stars 20 forks source link

Implement proper authorization #37

Closed adamkewley closed 5 years ago

adamkewley commented 6 years ago

At the moment, all users can see+abort eachover's jobs, which is fine for internal data requests but poor for anything production-grade.

adamkewley commented 6 years ago

Blocked by this: The deletion API: because there's no authorisation, it would be risky to allow users to delete any job (need an admin role, etc.)

adamkewley commented 5 years ago

This has been kicked back to the 1.x/2.x wishlist, will not be implemented in time for 1.0.0