Legal API: "GET business" V2 endpoint should check authorization before returning slim response
Open
bug
Entities Team
techdebt
- Dominant language
- JavaScript
- Stars
- 23
- Forks
- 62
- Avg merge
- 24m
- Merged PRs (30d)
- 1
Description
In the following endpoint code, if the request is "slim" then data is returned, even if the current account is not authorized.
I think authorization should be checked before returning data.
https://github.com/bcgov/lear/blob/bc3f073d696561f2bcd258f728906e655d58dc7d/legal-api/src/legal_api/resources/v2/business/business.py#L58
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.