Fix the access filter for privileged roles.
Description:
Current behavior:
- Endpoints that require
service.dataset.viewersoreditorsroles do not allow requests from users with a higher role. Users withservice.dataset.adminreceive a403response code from endpoints like/retrievalInstructionsor/storageInstructions.
Expected behavior:
- Users with role
service.dataset.adminorservice.dataset.editorsare able to request endpoints that are available for users with roleservice.dataset.viewers.
How to test:
Does functionality was tested and how?
Changes include:
-
Refactor (a non-breaking change that improves code maintainability). -
Bugfix (a non-breaking change that solves an issue). -
New feature (a non-breaking change that adds functionality). -
Breaking change (a change that is not backward-compatible and/or changes current functionality).
Changes in:
-
Common code
Dev Checklist:
-
Added Unit Tests, wherever applicable. -
Updated the Readme, if applicable. -
Existing Tests pass -
Verified functionality locally -
Self Reviewed my code for formatting and complex business logic.
Edited by Rustam Lotsmanenko (EPAM)