search

eclipse-tractusx / portal-backend

Portal Backend
Apache License 2.0
8 stars 20 forks source link

OSP Management | 403 error | Receiving 403 error on "Customer overview" #1051

Open tfjanjua opened 2 weeks ago

tfjanjua commented 2 weeks ago

Current Behavior

image

Request URL: https://example.com/api/administration/registration/network/companies?page=0&size=10 Request Method: GET Status Code: 403 Forbidden

Expected Behavior

There should not be 403 error if a user has OSP role.

Steps To Reproduce

Login to the portal having company role: OSP Navigate to the OSP Management → Onboarding Management Switch to the “customer Overview“ tab

Findings

The API: /api/administration/registration/network/companies has view_submitted_applications role which is already part of 2 other APIs:

  1. api/administration/registration/application/{applicationId}/companyDetailsWithAddress
  2. api/administration/registration/applications

So, it seems like the API: /api/administration/registration/network/companies has wrong role? @evegufy | @jjeroch, could you please have a look and share your opinion on this. thanks

ybidois commented 1 week ago

@MaximilianHauer could you look into this?

MaximilianHauer commented 1 week ago

Hi , i assume we solved this already with this topic

if not please inform us that we can finetune it .