Package managers API: permissions incoherence
Situation
Follow up of !58329 (merged)
The group level maven endpoints require:
-
read_group
on the target group -
read_package
on the project hosting the package
The group level nuget endpoints require:
-
read_package
on the target group -
read_package
on the project hosting the package
nuget APIs are more restrictive than maven.
Solution
Use the maven permission checks as a baseline for all group level endpoints.
Edited by David Fernandez