dataset details visable without authentication
Closed this issue · 0 comments
schluenz commented
Issue Name
unauthorized dataset metadata access
Summary
A query for a dataset with full id like
curl -v -k -X GET http://localhost:3000/api/v3/Datasets/10.3204%2F20190010.11007695.cnk55_90kom_a
returns the full dataset metadata without token
Expected Behaviour
I would have expected a "not authorized" response.
Extra Details
the dataset is not published