Lock Down User Creation To YNet Users, Unless System Admin #107
Labels
🔒 security
Relates to the security mode of the app.
♻️ refactor
Improves code's internal structure without changing its behavior.
Relates to:
Context
Is your feature request related to a problem? Please describe.
Users should only be able to be created, if they exist in the YNet Active Directory. Or are created by a system admin.
Describe the solution you'd like
Lock down user creation, through sign up, and via user creation endpoint, to YNet Active Directory users, unless system admin.
Additional context
This effects both the "all users" create page /api/users and
api/src/middlewares/authorization-middleware.ts
-> ensureUserFromAuth0Token`The text was updated successfully, but these errors were encountered: