User who has write scope (beam scientists) should not be able to create record with BTR which they don't belong to.
We need to apply additional check at Metadata service to capture BTR of the metadata record user requested to create and check against user's BTR list. If BTR of the metadata record is not in a list a proper error should be thrown.
Add exception to foxden admins who should be able to create records with any BTR.
Users are authorized to view and modify only those records that they or their research group have created. Research group membership is defined by Unix groups and queried through the Lightweight Directory Access Protocol (LDAP).
Therefore, we should apply proper check for records with user schema, i.e. user based records should be shown in addition to user's BTR, and only this user should be granted permission to modify it.
User who has write scope (beam scientists) should not be able to create record with BTR which they don't belong to.
We need to apply additional check at Metadata service to capture BTR of the metadata record user requested to create and check against user's BTR list. If BTR of the metadata record is not in a list a proper error should be thrown.
Add exception to foxden admins who should be able to create records with any BTR.
Users are authorized to view and modify only those records that they or their research group have created. Research group membership is defined by Unix groups and queried through the Lightweight Directory Access Protocol (LDAP).
Therefore, we should apply proper check for records with user schema, i.e. user based records should be shown in addition to user's BTR, and only this user should be granted permission to modify it.