View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0006250 | Taler | libeufin-nexus | public | 2020-05-21 07:05 | 2024-03-07 19:49 |
| Reporter | Florian Dold | Assigned To | Resolution deadline | ||
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | low | Severity | minor | Reproducibility | have not tried |
| Status | closed | Resolution | suspended | ||
| Target Version | 0.9.4 | Fixed in Version | 0.9.4 | ||
| Summary | 0006250: implement advanced permission storage and checking | ||||
| Description | Right now, the nexus doesn't do any permissions at all beyond authenticating the user. | ||||
| Tags | No tags attached. | ||||
| It does. This is one example from the Taler facade: https://git.taler.net/libeufin.git/tree/nexus/src/main/kotlin/tech/libeufin/nexus/Taler.kt?id=1b9fbb02ac2d2eb402c18877079d1bdbae03a620#n180 | |
| Although a valid issue, that can be moved to another release because Nexus will rarely be exposed online AND have more than one user at the first deployment with Postfinance. On top of that, the note above shows that checks do take place. It remains to check WHERE ELSE they may be needed and test them. | |
| I'm confused. In the current architecture, is this about *sandbox* (not nexus), or simply resolved/dead? | |
| It can still affect Nexus, because once it'll serve the TWG you might still want permission-based access control. If you want permission-based access control for the bank, I'd suggest to file another bug. | |
| Not planning to serve permission-based accessed control at the moment | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2020-05-21 07:05 | Florian Dold | New Issue | |
| 2020-11-10 11:17 | MS | Target Version | => 0.9.3 |
| 2023-04-11 09:03 | MS | Note Added: 0020065 | |
| 2023-04-11 09:08 | MS | Note Added: 0020066 | |
| 2023-04-11 09:08 | MS | Target Version | 0.9.3 => |
| 2023-04-13 18:38 | Florian Dold | Category | nexus => libeufin-nexus |
| 2023-04-13 18:50 | Florian Dold | Project | libeufin => Taler |
| 2023-04-17 09:42 | Florian Dold | Target Version | => post-1.0 |
| 2023-04-17 09:42 | Florian Dold | Summary | implement permission storage and checking => implement advanced permission storage and checking |
| 2023-12-02 10:48 | Christian Grothoff | Note Added: 0020700 | |
| 2023-12-03 19:23 | MS | Note Added: 0020718 | |
| 2023-12-03 19:28 | MS | Note Edited: 0020718 | |
| 2023-12-19 08:32 | MS | Status | new => informing |
| 2023-12-19 08:33 | MS | Resolution | open => suspended |
| 2023-12-19 08:33 | MS | Note Added: 0020774 | |
| 2023-12-22 13:00 | Christian Grothoff | Fixed in Version | => 0.9.4 |
| 2023-12-22 13:00 | Christian Grothoff | Target Version | post-1.0 => 0.9.4 |
| 2024-03-07 19:49 | Christian Grothoff | Status | informing => closed |