Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Agencies with API backends that have multiple URL prefixes don't have permissions to access their API backend configuration #156

Closed
GUI opened this issue Nov 26, 2014 · 1 comment

Comments

@GUI
Copy link
Member

GUI commented Nov 26, 2014

In the new admin permissions setup, if an API backend is composed of multiple unique URL prefixes, we had setup scopes for each one of those URL prefixes and granted permissions to those separate scopes. The intention was that any admin that had permissions for all the prefixes contained in an API backend would be able to administer those API backends. However, due to a bug in the permissions logic, this was note the case, and agencies that had API backends involving multiple, distinct URL prefixes were forbidden. I believe the only agency this affected was FDA.

@GUI
Copy link
Member Author

GUI commented Nov 26, 2014

Fixed by NREL/api-umbrella-web@6e5459e and tests added for this multi-url prefix scenario.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant