Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authorization checks for Tasks GraphQL API #277

Closed
zaychenko-sergei opened this issue Nov 14, 2023 · 2 comments
Closed

Authorization checks for Tasks GraphQL API #277

zaychenko-sergei opened this issue Nov 14, 2023 · 2 comments
Labels
enhancement New feature or request

Comments

@zaychenko-sergei
Copy link
Contributor

Permissions:

  • Listing tasks by dataset, getting task data by id - must have a Reader access in the related dataset
  • Cancel tasks - must have a Writer access to the related dataset
  • Schedule task - must have a Writer access to the related dataset

Enforcing task permissions in TaskScheduler:

  • Extract associated dataset ID
  • Resolve dataset
  • Ensure authorized action via OSO authorizer
  • Error handling
@zaychenko-sergei zaychenko-sergei added the enhancement New feature or request label Nov 14, 2023
@zaychenko-sergei
Copy link
Contributor Author

TODO: revise these requirements as we are moving out some of the logic into Flows domain

@zaychenko-sergei
Copy link
Contributor Author

Obsolete - this API has been removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant