(Web API) /api/metadata endpoint should use ACL

Registered by Morten Olav Hansen on 2014-03-27

Today we only allow imports from user who has either ALL or F_METADATA_IMPORT (what we call ACL_OVERRIDE_AUTHORITIES).

The metadata endpoint should be extended to support the new AclService, which means that any user can use the endpoint, but it will only import the parts of the JSON/XML that the user is allowed to create/update.

Blueprint information

Status:
Complete
Approver:
Morten Olav Hansen
Priority:
Undefined
Drafter:
Morten Olav Hansen
Direction:
Approved
Assignee:
Morten Olav Hansen
Definition:
Approved
Series goal:
Accepted for trunk
Implementation:
Implemented
Milestone target:
milestone icon 2.17
Started by
Morten Olav Hansen on 2014-09-05
Completed by
Morten Olav Hansen on 2014-09-26

Related branches

Sprints

Whiteboard

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.