hackforla / hackforla/peopledepot

Test field level permissions

Open
#274 9 comments 0 reactions 0 assignees View on GitHub
complexity: large dependency ethan p-feature: permissions p-feature: program area p-feature: projects p-feature: user PII: FALSE role: back end s: PD team size: 8pt
Dominant language
Python
Stars
14
Forks
37
Avg merge
9d 15h
Merged PRs (30d)
5

Description

### Dependency
- [ ] #331 - see [Ethan's comment from Sept 30, 2024 below](https://github.com/hackforla/peopledepot/issues/274#issuecomment-2384465305)

### Overview

We are planning on including field-level security for tables. The required permissions need to be tested before implementation.

### Action Items
- implement code needed for FLS (tables, possibly models)
- [x] create tables
- [x] add test data
- test Practice Lead project
- [ ] create test cases for FLS

### Resources/Instructions
- [PostgreSQL documentation for field-level security policies](https://www.postgresql.org/docs/16/ddl-rowsecurity.html)
- [Django multitenancy](https://schinckel.net/2017/12/20/django-multitenancy-using-postgres-row-level-security/)
- Use cases and tests for FLS feasibility: https://github.com/hackforla/peopledepot/issues/150#issuecomment-2043688312
- [Tables and test data](https://github.com/hackforla/peopledepot/issues/150#issuecomment-2030667385)
- Ethan's proposal and documentation on the wiki: https://github.com/hackforla/peopledepot/wiki/Security:-Field-Level-Proposal-(using-Github-Copilot)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.