Secure API - Githubissues

cdisc-org / conformance-rules-editor

MIT License

6 stars 3 forks source link

Open gerrycampion opened 1 year ago

gerrycampion commented 1 year ago

Currently, event though the frontend is restricted, all API functionality is accessible by all CDISCID users.

Acceptance Criteria:

Only users with write permissions (currently this means users in the Core Author Group) should be authorized to perform create, update, delete operations via the api

gerrycampion commented 2 months ago

@nickdedonder I'm not sure why this was closed. I think it is an important security concern