search

gyselroth / balloon

High performance, feature rich document management system written for the cloud
GNU General Public License v3.0
18 stars 7 forks source link

Provide the possibility to execute requests as another user through acl middleware #403

Open raffis opened 5 years ago

raffis commented 5 years ago

Is your feature request related to a problem? Please describe

Yes. Currently it is not possible to get the view of another user account without knowing or reseting the password.

Describe the solution you'd like

I'd like to introduce a new query string called user={user id} which allows to act on behalf of another user. The acl middleware in v3 might switch the current identity to the one from the query string as long as some acl rule matches the request.

See acl middleware v3 #384.