statisticsnorway/dapla-dlp-pseudo-service

Authorize users based on DEPSEUDO privilege

kschulst opened this issue · 1 comments

Right now authorization to depseudonymize a dataset is granted by matching the users username to a static list of trusted users configured in the dapla-pseudo-service.

Instead, the dapla-pseudo-service should check if the user has a special DEPSEUDO privilege associated with the dataset that is requested to be depseudonymized.

The DEPSEUDO access privilege has been introduced, and the pseudo-service already supports checking access priviliges from the user-access service.