Commit Graph

8 Commits

Author SHA1 Message Date
Ralf Haferkamp e8e361d32f Add permission checks to users and groups Graph API
Only users with the account management permission should be able to
create, update or delete users. This also restricts access to the APIs
that allow listing all Groups/all Users.

Fixes #3177
2022-02-22 10:53:08 +01:00
David Christofas f5aabe1a87 update reva to latest master 2021-10-15 17:45:16 +02:00
David Christofas 600c7ca351 use updated VerifyScope 2021-10-15 17:45:11 +02:00
David Christofas fb0380820c enable archiver for public shares 2021-10-15 17:45:06 +02:00
Ishank Arora 3e98b8df72 Set reva JWT token expiration time to 24 hours by default 2021-09-23 09:10:40 +02:00
Josh Soref 55667a3ab3 spelling
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2021-09-20 16:54:29 +05:45
Jörn Friedrich Dreyer 55aacdea13 update reva to ec4099da
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-08-12 11:08:10 +00:00
Jörn Friedrich Dreyer 5070941dc4 graph: refactor auth and middlewares
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2021-07-21 08:54:19 +00:00