Closed jonnybazookatone closed 9 years ago
This is slightly confusing. The UserView GET is solely for the user that is requesting the GET. This method is only accessible by users logged in.
There should be a separate end point to request to see the libraries of a given user by passing their e-mail address. I think this is out of scope for the basic milestone, and can be added in the second milestone.
This is a more complex feature than described in the above, and so will be closed here, and added at a later date if it is a major part that is wanted.
The GET endpoint for the UserView should only return Public libraries if the user has no permissions, and if they have the relevant permissions for other libraries, those too.