Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update authorization so that readDataEntity and downloadDataPackageArchive require authenticated users #153

Open
servilla opened this issue Jan 14, 2025 · 0 comments
Assignees
Labels
feature New feature high priority High priority

Comments

@servilla
Copy link
Collaborator

To prevent unfettered exfiltration of data from PASTA's datastore, users should be required to authenticate through an IdP before being allowed to execute either the readDataEntity or downloadDataPackageArchive service methods.

Note that downstream resource authorization may prevent access to individual data resources.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature New feature high priority High priority
Projects
Status: In progress
Development

No branches or pull requests

1 participant