Skip to content

Node.js: clarify instance-based auth - #2761

Open
sjvans wants to merge 9 commits into
mainfrom
instance-based
Open

Node.js: clarify instance-based auth#2761
sjvans wants to merge 9 commits into
mainfrom
instance-based

Conversation

@sjvans

@sjvans sjvans commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

No description provided.

Comment thread guides/security/authorization.md Outdated
Comment thread guides/security/authorization.md Outdated
sjvans and others added 2 commits July 27, 2026 17:26
… reject-403

- Simple static checks now also apply to collection-bound actions in Node.js
  (cap/cds#6570), alongside CREATE/NEW and unbound actions/functions.
- Rejected Entity Selection (single-entity READ -> 404, UPDATE/DELETE -> 403)
  is no longer Java-only; Node.js aligns (verified in cds-compliance#46). The
  CAP Java version/config note is scoped to an impl-java block.
Comment thread guides/security/authorization.md Outdated
@sjvans
sjvans marked this pull request as ready for review August 14, 2026 00:42
@sjvans
sjvans requested review from danjoa and smahati as code owners August 14, 2026 00:42
Comment on lines +264 to +265
| bound action/function | <Na/> | <Y/> | <Na/><sup>1</sup> | = `@requires` |
| action/function | <Na/> | <Y/> | <Na/><sup>2</sup> | = `@requires` |

@sjvans sjvans Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
| bound action/function | <Na/> | <Y/> | <Na/><sup>1</sup> | = `@requires` |
| action/function | <Na/> | <Y/> | <Na/><sup>2</sup> | = `@requires` |
| action/function | <Na/> | <Y/> | <Na/><sup>1,2</sup> | = `@requires` |

better?

@renejeglinsky

Copy link
Copy Markdown
Contributor

This guide is about to be untoggled: #2759
Does it make sense to base this PR on the "untoggle" one so that you don't add new profiling here?

@sjvans

sjvans commented Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

This guide is about to be untoggled: #2759 Does it make sense to base this PR on the "untoggle" one so that you don't add new profiling here?

is it ready?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants