Skip to content

ACL scoped resource access: `/tools/secure-find` and `/dicom-web/studies`

Rob Oakes requested to merge roakes/auth-resource-filtering into roakes/nsync-hpop
  • First pass implementation of scoped search, applied to the /tools/secure-find and DICOMmweb study list endpoints
    • /tools/secure-find will analyze local ACL policies to filter out search results for which a user does not have a policy authorizing access
  • Added secure_search and secure_user modules
    • UserContextMixin provides method for introspecting tokens via the Sonador PACS server for the Orthanc instance to retrieve user IDs, groups, and permissions

Merge request reports