-
Task
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
Service Team 1 - Sprint 10, Service Team 1 - Sprint 11
We are using openshift-oauth-proxy to authenticate users.
Based on the current endpoints, the current permissions are required:
- read permission on serviceinstances, builds, buildconfigs
- edit permission on mobileclient CRD
To keep things simple, let's add a permission check (perhaps in the oauth-proxy) to make sure the user have the edit permission on the namespace in order to use the service.
After that, we can also check if it's possible to perform permission checks at per-endpoint level (but this is a stretch goal for this task).
There are no Sub-Tasks for this issue.