Hide subs from servers where user is not a member #4

Closed
opened 2024-03-17 22:17:24 +00:00 by corbz · 3 comments
Owner

When authenticated, any user can see all subscriptions.

Update the API so only the proper subscriptions are shown.

When authenticated, any user can see all subscriptions. Update the API so only the proper subscriptions are shown.
corbz added the
enhancement
label 2024-03-17 22:17:24 +00:00
corbz added this to the PYRSS project 2024-03-17 22:17:24 +00:00
Author
Owner

Requirements have changed, now it's the server that has to be hidden, as subscriptions are hidden behind selecting a server.

Therefor only the servers have to be hidden in the UI. Logic for blocking access to the subscriptions should be implemented with the AI also.

Requirements have changed, now it's the server that has to be hidden, as subscriptions are hidden behind selecting a server. Therefor only the servers have to be hidden in the UI. Logic for blocking access to the subscriptions should be implemented with the AI also.
Author
Owner

I've implemented a filter in the querysets for the subscription api, so that the user only sees subscriptions with a guild_id, matching one of the user's saved guilds.

What still needs to be done, is server-side processing for defining and saving the user's saved guilds, right now the data comes from the client, trusting that there is no tampering.

I've implemented a filter in the querysets for the subscription api, so that the user only sees subscriptions with a guild_id, matching one of the user's saved guilds. What still needs to be done, is server-side processing for defining and saving the user's saved guilds, right now the data comes from the client, trusting that there is no tampering.
Author
Owner

I'm sure this is completed

I'm sure this is completed
corbz closed this issue 2024-06-11 13:26:30 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: corbz/PYRSS-Website#4
No description provided.