Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security review PR - Collection of all "team project" feature related changes #89

Closed
wants to merge 31 commits into from

Conversation

pieterlukasse
Copy link
Contributor

@pieterlukasse pieterlukasse commented Jan 30, 2024

Main Jira Ticket: VADC-618

New Features

  • Addition of "team project" access control to relevant cohort-middleware endpoints

...and add both real and mock implementations. This makes this
part easier to test.
...and add respective tests
Feat: add "team project" filtering to /cohortdefinition-stats endpoint
...which is cohort_definition_id...there is no such thing as "cohort id"
…n_for_team_project

Feat: integrate extra 'team project' validation for concept endpoints
Important: these can only be added back with proper changes to ensure
the correct "team project" filtering takes place
...to support team projects that start with "/"
...over the other variation of this method (TeamProjectValidationForCohortIdsList)
…n_for_team_project_for_cohort_data_endpoints

Feat: integrate Arborist validation for team project for cohort data endpoints AND remove unused endpoints
This reverts (part of) commit c38cfad.
...for cases where authorization failed
...to ensure 403 is returned when TeamProjectValidationForCohort returns false
...to ensure 403 is returned when HasAccessToTeamProject returns false
models/cohortdefinition.go Show resolved Hide resolved
server/router.go Show resolved Hide resolved
@pieterlukasse
Copy link
Contributor Author

pieterlukasse commented Feb 7, 2024

thanks for the approval @k-burt-uch . I'll move just the new commits to a separate PR to master. Closing this one and keeping it for the record.
See #90

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants