afw-org / afw

Adaptive Framework
https://afw.tools
MIT License
4 stars 1 forks source link

checkIndividualObjectReadAccess configuration parameter for adaptors #90

Open mike000000000 opened 1 month ago

mike000000000 commented 1 month ago

Adaptor requests to get and retrieve objects always do an action 'query' authorization check before any objects are retrieved. It also does a action 'read' authorization check for each individual object before it's return. With this new checkIndividualObjectReadAccess configuration parameter, this 'read' check only happens is the parameter is set to 'true'.

mike000000000 commented 1 month ago

@JeremyGrieshop tests might be good with parameter true and false, but I know you've been thinking about authorization tests. I don't plan do do any more with this unless you find something. I'm making a different issue for the other half of our discussion.

You can check the description of parameter here:

        "checkIndividualObjectReadAccess": {
            "brief": "Check individual object read access",
            "dataType": "boolean",
            "defaultValue": false,
            "description": "Adaptor requests to get and retrieve objects always do an action 'query' authorization check before any objects are retrieved. If this property is 'true', an additional action 'read' authorization check is made for each individual object. This is useful if the properties of an object are needed to make an authorization decision.",
            "label": "Check Individual Object Access",
            "required": false
        },