Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Restrict API endpoints for non-admin user #4

Closed
1 of 9 tasks
dikyarga opened this issue Apr 6, 2019 · 3 comments
Closed
1 of 9 tasks

Restrict API endpoints for non-admin user #4

dikyarga opened this issue Apr 6, 2019 · 3 comments
Labels
help wanted Extra attention is needed

Comments

@dikyarga
Copy link
Member

dikyarga commented Apr 6, 2019 •
edited
Loading

Detail about ACL (Access Control List) documentation : https://loopback.io/doc/en/lb3/Controlling-data-access.html

Here endpoints we need to restrict :

  • EventTypes - non-admin only can get
  • ListOfAttendees - admin only can access
  • Organizations - non-admin only can do POST (for register their organzation) and GET (to retrive existing organization, in case they have been register their organization)
  • Participants - only admin can access
  • Profiles - only admin can access
  • RoomTypes - non-admin only can GET
  • User - only admin can access
  • RoleMappings - only admin can access
  • RoleTypes - only admin can access
  • tips : go to /explorer/ path to see all current available endpoints and test it directly
@dikyarga dikyarga added the help wanted Extra attention is needed label Apr 6, 2019
@dikyarga dikyarga pinned this issue Apr 6, 2019
@fadlifajrin
Copy link
Contributor

saya ngerjain issue ini ya

@fadlifajrin
Copy link
Contributor

RoleMappings dan RoleTypes tidak bisa diset pakai generator lb acl ya

@fadlifajrin fadlifajrin mentioned this issue Apr 7, 2019
Merged
@dikyarga
Copy link
Member Author

dikyarga commented Apr 19, 2019 •
edited
Loading

RoleMappings dan RoleTypes tidak bisa diset pakai generator lb acl ya

Iya, Mas. Dia bawaan soalnya, bagian ini saya lanjutkan ya, Mas. Yang PR kemarin biar merge dulu aja.

Terima kasih yak @fadlifajrin

@dikyarga dikyarga closed this as completed May 2, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
help wanted Extra attention is needed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dikyarga @fadlifajrin