Details
-
Task
-
Status: Open
-
L3 - Default
-
Resolution: Unresolved
-
None
-
M
Description
Context:
In the March 2020 backend senate we discussed how to handle event based process report authroziation and decided it's best to store whether the used definition is an event based process on the report definition dto.
This will allow cheaper authorisation checks as we know which auth service to call. (currently we first call EBP auth if not successfull engin auth)
AT:
- report definition dto contains `isEventDefinition` flag
- definitions returned from the definition endpoint contain that flag as well
Hint:
- we may consider a dedicated definitionType as an alternative