[ATLAS-2765] Authorization enhancements to scrub search results

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.1.0, 2.0.0
• Component/s: atlas-core
• Assignee: Madhan Neethiraj
• Reporter: Madhan Neethiraj
• Created: 24/Jun/18 03:44
• Updated: 26/Sep/19 00:39
• Resolved: 26/Jun/18 13:45

Description

Fine-grained authorization introduced in ATLAS-2459 allows setting up access controls at entity instance level - based on entity-type/entity-id/entity-classifications. The same access controls should be applied to search-results as well, to ensure that entity-attributes and entity-classifications are scrubbed from the search-result for entities on which the user doesn't have entity-read access.

Issue Links

• links to: Patch in review board
• links to: Pre-commit test run