lahirujayathilake opened a new issue, #533:
URL: https://github.com/apache/airavata-custos/issues/533

   Projects, Allocations, and Analytics are a researcher's own views, but the 
read routes require `core:projects:read` / `core:allocations:read` site 
privileges, so a plain allocation member sees nothing. Membership should be the 
default read path; privileges remain the admin superset (full listings).
   
   Convert `GET /projects` (+ `/{id}`) and `GET /compute-allocations` (+ 
`/{id}`, memberships, resources, usages) to a membership-scoped fallback for 
callers without the privilege.
   
   ### Acceptance
   - A member without site privileges sees their own projects/allocations and 
their detail pages; non-members get 404 on foreign detail.
   - Privileged callers still get the full listings (unchanged).
   - Remaining allocation-read routes are covered.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to