Closed shirey closed 1 year ago
The PUT /reindex-all
call is already protected. However, the individual PUT /reindex/<uuid>
call doesn't require Data-Admin access, it only requires Read access.
@shirey were you referring to the reindex-all or individual reindex call in this card originally?
@yuanzhou This was for reindex-all so closing.
Protect the reindex endpoint at the gateway so only users in the HuBMAP-Data-Admin can call it