bandada-infra/bandada

A member can be added to a credential group using an api key or an active session

vplasencia opened this issue · 0 comments

vplasencia commented

Describe the bug

A member can be added to a credential group using an api key or an active session.

To Reproduce

Steps to reproduce the behavior:

  1. Create a credential group.
  2. Use the api docs to add a member.
  3. The member will be added successfully because there is an active session.

If we use an admin api key. The member will be added too.

Expected behavior

Throw an error because you cannot add a member to a credential group using an api key or an active session. The member will always need to prove they meet the criteria.