Staging instance, all changes can be removed at any time

Skip to content

api/raw: Restrict raw object endpoint use to privileged users

Antoine Lambert requested to merge generated-differential-D7794-source into generated-differential-D7794-target

As that endpoint can leak sensible information regarding authors in the archive, it has been decided to not make it publicly available.

So restrict its use to staff users and users with new permission swh.web.api.raw_object.

Also lift rate limit on that new endpoint to ease development of the bridge of Software Heritage to IPFS.

Related to #4226 (closed)

Migrated from D7794 (view on Phabricator)

Merge request reports