What you did
I've set up a Request Policy as an Authorization Service but the newly added DebugKit.ignoreAuthorization doesn't seem to override the Request Authorization.
What happened
DebugKit toolbar threw a ForbiddenException.
What you expected to happen
DebugKit should bypass Request Authorization logic
This could easily be solved by adding a rule to canAccess function in the RequestPolicy class like so:
class RequestPolicy implements RequestPolicyInterface {
public function canAccess($identity, ServerRequest $request) {
if ($request->getParam('plugin') === 'DebugKit') {
return true;
}
}
}
but this will render DebugKit.ignoreAuthorization useless anyway!
What you did
I've set up a Request Policy as an Authorization Service but the newly added
DebugKit.ignoreAuthorizationdoesn't seem to override the Request Authorization.What happened
DebugKit toolbar threw a ForbiddenException.
What you expected to happen
DebugKit should bypass Request Authorization logic
This could easily be solved by adding a rule to
canAccessfunction in theRequestPolicyclass like so:but this will render
DebugKit.ignoreAuthorizationuseless anyway!