`list_functions` and `get_function` have different access controls. For example,

`list_functions` allows `PlatformAdmin` to get every available functions stored 
in the database.

https://github.com/baiduxlab/incubator-teaclave/blob/de285671c38c73bf57818573b51f555b49050ea8/services/management/enclave/src/service.rs#L475

If a function is not public, `get_function` only allows `FunctionOwner` to get 
the description of such a function. 

https://github.com/baiduxlab/incubator-teaclave/blob/de285671c38c73bf57818573b51f555b49050ea8/services/management/enclave/src/service.rs#L348

If a user (any roles) can get a function id through `list_functions`, the user 
should be able to get the description of this function through this function id 
as well.




-- 
Reply to this email directly or view it on GitHub:
https://github.com/apache/incubator-teaclave/issues/624
You are receiving this because you are subscribed to this thread.

Message ID: <apache/incubator-teaclave/issues/[email protected]>

Reply via email to