Uploaded image for project: 'mod-inventory-storage'
  1. mod-inventory-storage
  2. MODINVSTOR-482

Securing APIs by default

    XMLWordPrintable

    Details

    • Template:
    • Sprint:
      EPAM BatchLoader Sprint 41
    • Story Points:
      0.5
    • Development Team:
      Folijet
    • Epic Link:

      Description

      Per OKAPI-767, all public APIs should be protected by default. That means field permissionsRequired is required when defining non-system APIs in the handlers section of module descriptor. If there is a strong technical reason that an API cannot be protected, for example, /authn/login, use "permissionsRequired" : [ ] to make it explicit. Note it is OK to use "permissionsRequired": [ ] for two APIs //ramls and //jsonSchemas provided by RMB.

      Please fix following APIs in this module

      "/_/jsonSchemas"

        TestRail: Results

          Attachments

            Issue Links

            defines

            New Feature - New feature requests UXPROD-2220 NFR: Data Import (Batch Importer for Bib Acq) & PubSub Q2 2020 Technical, NFR, & Misc bug work

            • P2 - normal priority level, must be included in the current development cycle
            • Closed
            relates to

            Task - A task that needs to be done. RMB-616 Update readme to specify permissionsRequired

            • TBD - To be determined
            • Closed

            Task - A task that needs to be done. FOLIO-2567 Create following up module tickets after securing API by default

            • P2 - normal priority level, must be included in the current development cycle
            • Closed

            New Feature - New feature requests OKAPI-767 permissionsRequired required (securing APIs by default)

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

              Activity

                People

                Assignee:
                ruslan_lavrov Ruslan Lavrov
                Reporter:
                hji Hongwei Ji
                Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:

                    TestRail: Runs

                      TestRail: Cases