| Summary: | Prevent leakages of user permissions to api access tokens | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Martin Renvoize (ashimema) <martin.renvoize> |
| Component: | Authentication | Assignee: | Martin Renvoize (ashimema) <martin.renvoize> |
| Status: | NEW --- | QA Contact: | Testopia <testopia> |
| Severity: | enhancement | ||
| Priority: | P5 - low | CC: | julian.maurice, m.de.rooy, tomascohen |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| See Also: | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25795 | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | --- |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Bug Depends on: | 20568, 20612 | ||
| Bug Blocks: | |||
|
Description
Martin Renvoize (ashimema)
2018-04-20 12:48:23 UTC
Any developments on this front since almost two years passed? :) I still hope to get to it at some point.. likely when rebasing Kyle's work on permissions which is on my list for later this month. I envisage an OAuth2 style scopes system from the API perspective.. but th foundations for that are not yet available in Koha permissions code. |