Git Product home page Git Product logo

territory-data-service's People

Contributors

aventurina avatar dependabot[bot] avatar javalavajava avatar rtercias avatar versacomp avatar

Watchers

 avatar  avatar  avatar  avatar

territory-data-service's Issues

Deploy to azure

  1. Prep the API to run as a non-firebase function
  2. Have Travis CI deploy to Azure

Authorization enhancement: verify user's congregation matches the requested data

Currently, users are able to make requests to the API and, as long as the user is authenticated, the API does not care whether the user should have access to the requested data. As a first step, we want to verify that the user's congregation matches the data they're requesting.

This means we need to include user role and congregation to the request header, and match the cong against the requested query. If the congregation id is given as a query argument, then we can match against that. If it isn't, we may need to proceed with the query and check the result.

An exception to this is when the user role is Admin. These should be allowed regardless of congregation.

This needs to happen for most, if not all, our API queries.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.