cs3org / OCM-API

OpenCloudMesh API
38 stars 11 forks source link

Calling `mfa-enforced` a permission feels weird #126

Closed michielbdejong closed 3 weeks ago

michielbdejong commented 1 month ago

https://github.com/cs3org/OCM-API/blob/ddb16c55ff810e910be1ebd826f9731020538a08/spec.yaml#L515-L517

Permissions would usually be an additive list of modes of access, such a 'read' and 'write'.

But 'mfa-enforced' is intended to limit access by adding a requirement, not adding an option to the list of allowed access modes.

glpatcern commented 3 weeks ago

Fixed by #132