Skip to content

Update authorization so that readDataEntity and downloadDataPackageArchive require authenticated users #153

@servilla

Description

@servilla

To prevent unfettered exfiltration of data from PASTA's datastore, users should be required to authenticate through an IdP before being allowed to execute either the readDataEntity or downloadDataPackageArchive service methods.

Note that downstream resource authorization may prevent access to individual data resources.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Status

In progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions