Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

GetDecisions shouldn't require admin permissions #1645

Closed
mkleene opened this issue Oct 15, 2024 · 0 comments · Fixed by #1634
Closed

GetDecisions shouldn't require admin permissions #1645

mkleene opened this issue Oct 15, 2024 · 0 comments · Fixed by #1634

Comments

@mkleene
Copy link
Contributor

mkleene commented Oct 15, 2024

PEPs like Gateway need to call GetDecisions before making a decision about whether to decrypt. Currently GetDecisions requires admin permissions but the nature of this route is very different from the other administrative functionality. In order to make it practically usable we should allow non-admin users to call this route.
@mkleene mkleene mentioned this issue Oct 15, 2024
Merged
github-merge-queue bot pushed a commit that referenced this issue Oct 15, 2024
@mkleene @jrschumacher
fix: allow standard users to get authorization decisions (#1634)
718f5e3 
Lets `standard` users retrieve authorization decisions. [Does not allow
these users to retrieve
entitlements](https://github.com/opentdf/platform/blob/e3ed0b5ce6039000c9e3c574d3d6ce2931781235/service/authorization/authorization.proto#L289-L305).
Implements discussion from
virtru-corp/data-security-platform#403.

Resolves #1645.

---------

Co-authored-by: Ryan Schumacher <[email protected]>
@mkleene mkleene mentioned this issue Oct 17, 2024
Merged
github-merge-queue bot pushed a commit that referenced this issue Oct 17, 2024
@mkleene
fix: use the right service namespace and update the tests (#1665)
72ce62b 
fixes the attempted resolution of
#1645
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

fix: allow standard users to get authorization decisions opentdf/platform
1 participant
@mkleene