Skip to content

Refs #173 - Implement tests & fixes for tightened security on the user/role CRUD processors

laughing man requested to merge laughing_man77/apiopenstudio:feature/173-user-role-tests into develop

This includes:

  • Users cannot create/delete a role above them.
  • Privileged users can only see roles at or below them.
  • Privileged users can only see roles for the accounts/applications they are assigned to.
  • Tests for the endpoints
  • Access permission tests for all roles creating/reading/deleting

Merge request reports