Group Level Wiki: BE Update attachment API to support Group Level Wiki
Problem to solve
Uploading attachments to a project wiki happens through the post ":id/wikis/attachments"
endpoint. This needs to be adapted to work with group wikis.
Further details
Proposal
We can refactor the existing endpoint for reuse in both the /projects
and /groups
API contexts (separate endpoints for each container type).
Permissions and Security
- Adapt the existing authorization checks for group wikis.
- Respect the group wiki feature flag.
- Ensure there are multiple tests with different permission configurations to make sure the Web UI and the REST return the same level of data and avoid data leaks.
Documentation
Availability & Testing
Links / references
Edited by Markus Koller