Skip to content

Conversation

@v-rocheleau
Copy link
Contributor

@v-rocheleau v-rocheleau commented Apr 1, 2025

This allows bento-public's data catalogue to be optionally auth protected, so that projects and datasets are only shown to authorized users. This is a requirement for the PCGL demo.

  • The data catalogue relies on GET <katsu-url>/projects to build the catalogue
  • Setting BENTO_KATSU_PROJECTS_LIST_AUTHZ="true" forces authz check on /projects
    • If enabled, users in bento-public need to be logged-in and have the P_VIEW_PROJECTS permission to view the content of the data catalog.
    • If disabled, same behaviour as before

Related PRs:

  • bento-lib: adds new permissions
  • katsu: include authz checks on endpoints
  • authz service: use updated bento-lib permissions
  • bento-web: include auth headers for new protected endpoints
  • bento-public: include auth headers for new protected endpoints
  • beacon: include auth headers for new protected endpoints

@v-rocheleau v-rocheleau changed the title feat: data catalog authorization feat: public authorization Apr 2, 2025
Base automatically changed from releases/v19 to main October 17, 2025 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants