search

aiondemand / AIOD-rest-api

Services for the core of AIoD: Authentication and the metadata catalogue with REST API.
https://api.aiod.eu
MIT License
10 stars 7 forks source link

Improvement/privacy issues #298

Closed jsmatias closed 5 months ago

jsmatias commented 5 months ago

Code update to restrict access to sensitive information of metadata transferred from the former Drupal platform. The revisions includes:

  1. Restricting access to entries from the Drupal platform for the fields name, given_name, and surname within the persons entity, and the email field within contacts, exclusively to users possessing the "full_view_drupal_resources" permission.
  2. Requiring authentication for accessing the email field within contacts for other platforms.