meateam / api-gateway

api gateway
Apache License 2.0
10 stars 4 forks source link

Make `HandleUserFilePermission` generic #252

Open Shahar-Y opened 3 years ago

Shahar-Y commented 3 years ago

HandleUserFilePermission and some other functions are implemented in many places in the code of API-GW. This causes serious code-duplication and potential security vulnerabilities. Make these funcions generic and change the code accordingly.

Note: since this code is very sensitive, the implementer must write it and test it very carefully! The code must pass the CR of at-least two members!