Operator | Send invites with custom technical user | Change of Access Policy

eclipse-tractusx / portal-backend

Portal Backend

Apache License 2.0

7 stars 19 forks source link

Operator | Send invites with custom technical user | Change of Access Policy #932

Open typecastcloud opened 4 weeks ago

typecastcloud commented 4 weeks ago

Description

As portal operator, I want to access api/administration/invitation endpoint via technical user, so that a valid operator company can provide clients to integrate external systems like hubspot.

Right now only portal user can use the endpoint.

Acceptance Criteria

[ ] Technical user with correct operator bpn/organisation attribute and role invite_new_partner can send invites via api/administration/invitation endpoint.

Additional Information

[Authorize(Policy = PolicyTypes.CompanyUser)] -> [Authorize(Policy = PolicyTypes.ValidCompany)]

CC: @jjeroch @MaximilianHauer

MaximilianHauer commented 3 weeks ago

under clarification

typecastcloud commented 2 weeks ago

under clarification

The Initial step would be to allow access to endpoint via technical user at all. Right now only portal user can access this. There is no technical user that has this role to send out invites, but we can configure a different technical user to have the role until there is one. Adding a new technical user type that only CX Operator can create would be a second step.

But maybe you have a different proposal.

MaximilianHauer commented 2 weeks ago

@ntruchsess / @evegufy / @Phil91 lets discuss the options after your vacation

MaximilianHauer commented 1 week ago

@typecastcloud i would follow your idea regarding the creation of a technical_user that can be created by cx-operator. makes sense for me.

please enhance the ticket with the respective acc-