Skip to content

Restrict post and patch fields in user request #570

Open
#574
Open
Restrict post and patch fields in user request#570
#574
Labels
PII: FALSETable or function does not have or use Personally Identifiable Information (PII)complexity: largeVery free-form with vague requirements that need to be worked outp-feature: userrole: devs: PD teamstakeholder: People Depot Teams: orgstakeholder: the org (includes stats)size: 8ptCan be done in 31-48 hours
Milestone
02. Security

Description

@ethanstrominger
ethanstrominger
opened on Oct 17, 2025

Overview

Restrict post and patch fields in a request to those specified in field_permissions.csv

Metadata

Metadata

Assignees

No one assigned

    Labels

    PII: FALSETable or function does not have or use Personally Identifiable Information (PII)complexity: largeVery free-form with vague requirements that need to be worked outp-feature: userrole: devs: PD teamstakeholder: People Depot Teams: orgstakeholder: the org (includes stats)size: 8ptCan be done in 31-48 hours

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    P: PD: Project Board
    Status
    🆕New Issue Review

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions