hackforla / hackforla/peopledepot
eligible-users endpoint - restrict response fields
Open
complexity: medium
dependency
ethan
milestone: missing
p-feature: user
PII: FALSE
role: dev
s: VRMS
size: 3pt
- Dominant language
- Python
- Stars
- 14
- Forks
- 37
- Avg merge
- 9d 15h
- Merged PRs (30d)
- 5
Description
### Dependencies
- [ ] #433
- [ ] #394
### Overview
Ensure users see only information they are privileged to see
### Action items
- [ ] serializers.py: Restrict response fields based on either global admin relevant fields or project admin related fields. To do this, call PermissionValidation.get_fields(operation="read", permission_type=, table_name="user") This method was implemented by issue #346.
- [ ] tests: mock call to serializer that mocks requesting user, obj, and project id parameter.
Contributor guide
Assessment
This issue has not been assessed yet.