search

bcgov / hcap

Application supporting access to the Health Career Access Program (HCAP) for employers and participants.
Apache License 2.0
2 stars 1 forks source link

HCAP-1336: Authenticate user's sites when fetching site phase allocations #874

Closed rhattie-ey closed 1 year ago

rhattie-ey commented 1 year ago

HCAP-1336

This PR prevents non-MoH users from accessing sites they do not have access to. It also adds a bit of documentation and typing to functions related to the phase-allocation endpoint.

It should be noted that this does NOT fix HCAP-1391 (allowing MoH users to get invalid site allocations). That issue should be handled separately.

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 2 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication