graasp / graasp/graasp-api

Restrict GET /item-memberships to admins

Open
#1,961 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
7
Forks
5
PR merge metrics
No merged PRs in 30d

Description

Getting memberships is used to get available members in a tree, check and view your permission. Let's specialise each of our use and keep membership handling to admins only.

`GET memberships: public -> admin `

Necessary changes:

- Get available members in chat
- Get contributors (library) - in `/informations` or in meilisearch index?
- (optional: currently reader cannot leave) An endpoint to leave an item (currently you can view your own item) ref https://github.com/graasp/graasp/issues/330

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.