Skip to:
There should be an Administrative type Right that a User may be assigned via a Role that allows them to Manage (View, Create, Edit) Supply Lines.
Acceptance:
there is a new Administrative type of right named SUPPLY_LINES_MANAGE in Reference Data added via new Flyway migration
the endpoint's that GET, PUT, POST & DELETE should require the SUPPLY_LINES_MANAGE (or service level token) for:
/api/supplyLines
a 403 is returned if the user doesn't have the right (or a service level token)
RAML is updated
Check to ensure clients of updated endpoints don't break - raise an issue to the larger group if it does.
The new right SUPPLY_LINES_MANAGE with type: GENERAL_ADMIN is added.
Without that right, I can't:
view supplyLines
view particular supplyLine
create new supplyLines
edit supplyLines
There should be an Administrative type Right that a User may be assigned via a Role that allows them to Manage (View, Create, Edit) Supply Lines.
Acceptance:
there is a new Administrative type of right named SUPPLY_LINES_MANAGE in Reference Data added via new Flyway migration
the endpoint's that GET, PUT, POST & DELETE should require the SUPPLY_LINES_MANAGE (or service level token) for:
/api/supplyLines
a 403 is returned if the user doesn't have the right (or a service level token)
RAML is updated
Check to ensure clients of updated endpoints don't break - raise an issue to the larger group if it does.