<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:08:15 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-778] Enforce permissions on Okapi administrative endpoints in CI builds</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-778</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;We should set up mod-users &lt;img class=&quot;emoticon&quot; src=&quot;/images/icons/emoticons/help_16.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;, mod-login, mod-permissions, and mod-authtoken for the Okapi supertenant, create a user, and require login to update Okapi admin endpoints&lt;/p&gt;</description>
                <environment></environment>
        <key id="80309">FOLIO-778</key>
            <summary>Enforce permissions on Okapi administrative endpoints in CI builds</summary>
                <type id="10003" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium">Task</type>
                                            <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10003">Done</resolution>
                                                        <assignee accountid="5c706fbb47a54a6728e59df2">Wayne Schneider</assignee>
                                                                <reporter accountid="5c706fbb47a54a6728e59df2">Wayne Schneider</reporter>
                                    <labels>
                            <label>ci</label>
                    </labels>
                <created>Wed, 16 Aug 2017 13:59:34 +0000</created>
                <updated>Wed, 15 Jul 2020 12:30:44 +0000</updated>
                            <resolved>Wed, 15 Jul 2020 12:30:44 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>5</watches>
                                                    <timespent seconds="1800">30 minutes</timespent>
                                <comments>
                                                            <comment id="189009" author="5c706fbb47a54a6728e59df2" created="Wed, 23 Aug 2017 21:30:01 +0000"  >&lt;p&gt;This will have to await the release of Okapi 1.10.0&lt;/p&gt;</comment>
                                                            <comment id="189010" author="5c706fbb47a54a6728e59df2" created="Fri, 16 Mar 2018 15:56:39 +0000"  >&lt;p&gt;Reopening this issue, it is a better description of what needs to be done than 
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;FOLIO-759&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/FOLIO-759&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;Update how db credentials are passed to modules in CI builds&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium&quot; /&gt;
            FOLIO-759
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Open&lt;/span&gt;
            &lt;/span&gt;
.&lt;/p&gt;</comment>
                                                            <comment id="189011" author="5c706fbb47a54a6728e59df2" created="Fri, 27 Jul 2018 16:39:00 +0000"  >&lt;p&gt;See &lt;a href=&quot;https://github.com/folio-org/okapi/blob/master/doc/securing.md&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/okapi/blob/master/doc/securing.md&lt;/a&gt;&lt;/p&gt;</comment>
                                                            <comment id="189012" author="5c706fbb47a54a6728e59df2" created="Wed, 29 Aug 2018 21:06:27 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3A38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; class=&quot;user-hover&quot; rel=&quot;712020:38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; data-account-id=&quot;712020:38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; accountid=&quot;712020:38d1a08f-86a8-4df2-9191-239b16b0a81a&quot; rel=&quot;noreferrer&quot;&gt;Heikki Levanto&lt;/a&gt;, &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f9abc1eb45b2e007453f423&quot; class=&quot;user-hover&quot; rel=&quot;5f9abc1eb45b2e007453f423&quot; data-account-id=&quot;5f9abc1eb45b2e007453f423&quot; accountid=&quot;5f9abc1eb45b2e007453f423&quot; rel=&quot;noreferrer&quot;&gt;John Malconian&lt;/a&gt; (and other interested parties) &amp;#8211; what is the best approach here?&lt;/p&gt;

&lt;p&gt;It seems like the best procedure to document (in &lt;a href=&quot;https://github.com/folio-org/folio-install&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-install&lt;/a&gt;) and implement (in &lt;a href=&quot;https://github.com/folio-org/folio-ansible&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-ansible&lt;/a&gt;) would be to secure the supertenant &lt;em&gt;first&lt;/em&gt;, then build the rest of the system using the supertenant superuser you create (see 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;FOLIO-1336&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/FOLIO-1336&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;bootstrap necessary user data in order to use the API&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            FOLIO-1336
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
). The only problem I have is that then there are really kind of two superusers &amp;#8211; one for the supertenant, and one for the created tenant &amp;#8211; but maybe that&apos;s OK (after all, there may be many tenants, not just one).&lt;/p&gt;

&lt;p&gt;Other thoughts?&lt;/p&gt;</comment>
                                                            <comment id="189014" author="5f9abc1eb45b2e007453f423" created="Thu, 30 Aug 2018 01:00:17 +0000"  >&lt;blockquote&gt;
&lt;p&gt;t seems like the best procedure to document (in &lt;a href=&quot;https://github.com/folio-org/folio-install&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-install&lt;/a&gt;) and implement (in &lt;a href=&quot;https://github.com/folio-org/folio-ansible&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-ansible&lt;/a&gt;) would be to secure the supertenant first, then build the rest of the system using the supertenant superuser you create (see 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;FOLIO-1336&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/FOLIO-1336&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;bootstrap necessary user data in order to use the API&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium&quot; /&gt;
            FOLIO-1336
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
).&lt;/p&gt;&lt;/blockquote&gt;

&lt;p&gt;Agreed&lt;/p&gt;</comment>
                                                            <comment id="189015" author="5c706fbb47a54a6728e59df2" created="Wed, 15 Jul 2020 12:30:44 +0000"  >&lt;p&gt;This was done long ago.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10000">
                    <name>Blocks</name>
                                            <outwardlinks description="blocks">
                                        <issuelink>
            <issuekey id="79451">FOLIO-1134</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10002">
                    <name>Duplicate</name>
                                                                <inwardlinks description="is duplicated by">
                                        <issuelink>
            <issuekey id="81049">FOLIO-1798</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                            <outwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="80803">FOLIO-1446</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="53539">OKAPI-362</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="80688">FOLIO-1336</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="53580">OKAPI-388</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10144"><![CDATA[Core: Platform]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|hzxxm7:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 30 Aug 2018 01:00:17 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>