[Koha-bugs] [Bug 29523] Add a way to prevent embedding objects that should not be allowed

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29523

--- Comment #106 from Jonathan Druart <jonathan.druart+koha at gmail.com> ---
(In reply to Jonathan Druart from comment #105)
> (In reply to Martin Renvoize from comment #104)
> > I think I've mentioned it before.. but I think the solution likely lies in
> > redaction rather than outright removal of results.. I think we probably need
> > a way to identify what fields should be redacted for the redacted case at
> > each object level and then obviously a way to know when to call a redaction
> > function to clear out the fields for the API response.
> 
> I have written a quick follow-up on top of bug_33568 (that is based on top
> of this one):
> https://gitlab.com/joubu/Koha/-/commit/
> 75b8cd39135966d2ea1b8a48df9aec4a3254d0d5
> 
> Would that work?

One thing that is not really nice is that, in Koha::Patron::to_api we are now
having a json_patron and so not early returning, and we get 'restricted' in the
response whereas the unredacted version should not contain it. But that would
mean another call to is_accessible.

-- 
You are receiving this mail because:
You are watching all bug changes.