Skip to content

Conversation

ewan-escience
Copy link
Collaborator

Don't expose unpublished meta pages in API

Changes proposed in this pull request

  • Change row level security so only published meta pages are exposed in the API
  • Rename the table from meta_pages to meta_page
  • Patch upgrade of REST Assured

How to test

  • docker compose down --volumes && docker compose build --parallel && docker compose up --scale data-generation=0
  • Sign in as admin
  • Create an unpublished meta page (called "Public page" in the admin interface)
  • It should not be shown at http://localhost/api/v1/meta_page when visiting in your browser
  • Publish it
  • It should now be present at the API
  • Check if the new test does what it is supposed to do
  • Check if the RLS is correct

closes #1604

PR Checklist:

  • Increase version numbers in docker-compose.yml
  • Link to a GitHub issue
  • Update documentation
  • Tests

@ewan-escience ewan-escience self-assigned this Aug 19, 2025
Copy link

Copy link

Copy link
Member

@jmaassen jmaassen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works as expected

@ewan-escience ewan-escience merged commit 9c21b98 into main Aug 19, 2025
9 checks passed
@ewan-escience ewan-escience deleted the 1604-unpublished-meta-pages branch September 4, 2025 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unpublished meta pages are accessible via API
2 participants