CSCfi / CSCfi/rems

Hide Admin side from handler users also via API

Open
#3,404 0 comments 0 reactions 0 assignees View on GitHub
BigPicture
Dominant language
Clojure
Stars
66
Forks
28
Avg merge
7d 4h
Merged PRs (30d)
2

Description

Related to #[3394](https://github.com/CSCfi/rems/issues/3394)

Since handlers should not have access to the Administration tab in the UI in some use cases, we also need to restrict access to this information through the API.
- Check user's role
- if user doesn't have right to view e.g. form names, it would just show redacted

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.