search

tapis-project / tapis-apps

BSD 3-Clause "New" or "Revised" License
0 stars 0 forks source link

Apps: When sharing check access to execSystem, archiveSystem and file input sources #34

Open scblack321 opened 1 year ago

scblack321 commented 1 year ago

When the application owner attempts to share the application check that the owner has proper access for the following. If the owner does not have proper access then reject the share request.

  1. execSystemId
  2. execSystemExecDir
  3. execSystemInputDir
  4. execSystemOutputDir
  5. archiveSystemId
  6. archiveSystemDir
  7. Source system and path for all file inputs involving Tapis protocol sourceUrl
  8. Target paths for all file inputs

NOTE: Depending on design updates under discussion, it may not be necessary to check file paths. For example, if it is decided having EXEC for a system implies having FILE_READ and FILE_MODIFY then checking individual paths will not be needed.