Implement Portfolio Access Control - Part 2 · Issue #1127 · DependencyTrack/dependency-track · GitHub
Skip to content

Implement Portfolio Access Control - Part 2 #1127

Open

Description

Ticket #140 describes the initial support for Portfolio ACLs (beta) and covers the majority of cases. However, there are known gaps and these gaps will be implemented in this ticket.

Known gaps include:

  • AnalysisResource
  • NotificationRuleResource
  • PolicyResource
  • SearchResource
  • ViolationAnalysisResource

In addition, all resources where ACL logic is performed, should include a notification in the audit log for tracking purposes. This will be implemented as part of this enhancement.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions