Context:
After roles are assignable to collections with OPT-2545 their enforcement needs to be activated.
AT:
- users can only access collections they are authorized to by a role entry for their userId or a group they belong to
- users can only edit a collection (update & delete) if they have the MANAGER role on the collection
- users can only edit collection roles if they have the MANAGER role on the collection
- users can only edit collection scopes if they have the MANAGER role on the collection
- list endpoints (/collection & /entities) only include collections users are authorized to see based on their collection role
- the API indicates the role of the current user on a collection
- the new field is documented in the wiki
https://github.com/camunda/camunda-optimize/wiki/Collections
https://github.com/camunda/camunda-optimize/wiki/Entities
- the new field is documented in the wiki
This is the controller panel for Smart Panels app
- is depended on by
-
OPT-2627 Report/Dashboard Role Authorization
-
- Done
-