authorized user should be able to view datasets

CanDIG · May 22, 2024 · 36a1cdc · 36a1cdc
1 parent 09b77d9
commit 36a1cdc
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/permissions_engine/authz.rego b/permissions_engine/authz.rego
@@ -74,3 +74,11 @@ allow {
 allow {
     data.permissions.site_admin == true
 }
+
+# As long as the user is authorized, should be able to get their own datasets
+allow {
+    input.path == ["v1", "data", "permissions", "datasets"]
+    input.method == "POST"
+    data.permissions.valid_token == true
+    input.body.input.token == input.identity
+}