neo4j / apoc

Apache License 2.0
96 stars 28 forks source link

[NOID] Use Injected UrlAccessChecker for checking access to URLs #537

Closed mnd999 closed 11 months ago

mnd999 commented 11 months ago

Fixes #<Replace with the number of the issue, Mandatory>

Use Injected URLAccessChecker for checking access to URLs calling internal WebURLAccessRule directly Proposed Changes (Mandatory)

Inject a new URLAccessChecker to separate out APOC from making internal calls into WebURLAccessRule, as this needs to changes to support RBAC permissions as well. Having this injectable will mean that we can late get this new functionality in APOC as well for free.

The alternative is to move the config only based checks into APOC.

CLAassistant commented 11 months ago

CLA assistant check
All committers have signed the CLA.