Update the RBAC client to accept a directly passed x-rh-identity client.
Implement the checkRbac method in each of the export service stubs. The method should throw an exception if the user doesn't have permissions. The listener must catch and report these errors with exportClient.downloadExportError with error code 403 and a message "Insufficient permission".
Testing:
- Attempted use by a user missing RBAC subscription permissions should fail w/ access denied message.
- We're not checking opt-in status for this
- Export attempt otherwise should fail because data fetch is not yet implemented.
- blocks
-
SWATCH-2021 Report filtered subscription data to Export Service in JSON
- Closed
-
SWATCH-2018 Report filtered instance data to Export Service in JSON
- Closed
- is blocked by
-
SWATCH-1970 Consume export request messages for subscription data
- Closed