Stream: smart
Topic: Patient scopes, authz logic
Josh Mandel (Apr 21 2021 at 20:26):
Just noticed https://docs.fire.ly/firelyserver/releasenotes/releasenotes.html#release-4-1-0 in the Firely release notes -- it's a good reminder to all server developers about subtleties of enforcing policies for access to resources with patient/
scopes (TL;DR: need to be careful about traversing links across resources that belong to more than one compartment.)
FYI @Christiaan Knaap for discussion (this was a great catch and call-out).
Last updated: Apr 12 2022 at 19:14 UTC