-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SC-9017; SC-9003 - adds to /me service school info and user permissions #2502
Conversation
…rmissions This allows nuxt client to call only one endpoint instead of 3. This allows the other endpoints to be protected for direct access.
Codecov Report
@@ Coverage Diff @@
## develop #2502 +/- ##
===========================================
- Coverage 76.16% 76.08% -0.08%
===========================================
Files 513 513
Lines 14176 14179 +3
===========================================
- Hits 10797 10788 -9
- Misses 3379 3391 +12
Continue to review full report at Codecov.
|
@@ -33,9 +33,14 @@ class Service { | |||
throw new Forbidden('Your access token is not valid.'); | |||
} | |||
user.accountId = params.account._id; | |||
|
|||
const roles = await this.app.service('/roles/user').get(userId, params); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
They go over the user services with populate roles and the users services resolve all permissions if the roles are populated.
Description
This allows nuxt client to call only one endpoint instead of 3.
This allows the other endpoints to be protected for direct access.
Links to Tickets or other pull requests
https://ticketsystem.hpi-schul-cloud.org/browse/SC-9017
hpi-schul-cloud/nuxt-client#1762
Changes
Datasecurity details on Confluence
Deployment
New Repos, NPM pakages or vendor scripts
Approval for review
Link to Definition of Done
More and detailed information on the definition of done can be found on Confluence