Uploaded image for project: 'Subscription Watch'
  1. Subscription Watch
  2. SWATCH-2017

Implement rbac checking for exports

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • True
    • BIZ-356 - Export of Subscription Watch data

      Update the RBAC client to accept a directly passed x-rh-identity client.

      Implement the checkRbac method in each of the export service stubs. The method should throw an exception if the user doesn't have permissions. The listener must catch and report these errors with exportClient.downloadExportError with error code 403 and a message "Insufficient permission".

      Testing:

      • Attempted use by a user missing RBAC subscription permissions should fail w/ access denied message.
      • We're not checking opt-in status for this
      • Export attempt otherwise should fail because data fetch is not yet implemented.

            ksynvrit Kenny Synvrit (Inactive)
            lburnett0 Lindsey Burnett
            Sanket Jagtap Sanket Jagtap
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: