Wrong way to check Node constraint validation

Created on 24 April 2024, 2 months ago

Problem/Motivation

When creating an OpenAgenda node, constraint validation is made by calling the hasPermission function from openagenda sdk. That method calls "/v2/me/agendas" endpoint which needs admin rights. But a given public key may be able to fetch events from public agenda without needing to have admin rights.

Proposed resolution

Try to get at least the first event when validating OpenAgenda node to ensure read right is ok.

πŸ› Bug report
Status

Needs review

Version

3.4

Component

Code

Created by

πŸ‡«πŸ‡·France sgostanyan

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.69.0 2024