code4romania / onghub

Mozilla Public License 2.0
7 stars 5 forks source link

Create a read-only permission set #547

Open tudoramariei opened 2 months ago

tudoramariei commented 2 months ago

Is your feature request related to a problem? Please describe. When accessing the API we are using the same credentials as a user. This can create a big security concern when using a privileged user with read & write permissions.

Describe the solution you'd like Create a set of permissions that allows the same level of read access as a super admin but without any write access.

Describe alternatives you've considered Access to the API could be done using an API key instead of a normal account but the set of permissions is still necessary.