Restrict access to Objecten API admin by object type

[Marvinvincible]

Thema / Theme

Admin

Omschrijving / Description

Requests from Amsterdam:

• An administrator should only be able to access and manage specific object types, depending on their permissions.

• Want authorizations to be configurable per object type within the Objecten API.

• Only authorized object types are visible and editable.

• Documentation is needed for the access logic and how it can be configured.

Additionally:

• Higher granularity in permissions and functionality.

• Potential use of an admin panel.

• Using the Objecten API as the baseline.

• Restricting access and permissions to specific groups.

Toegevoegde waarde / Added value

No response

Aanvullende opmerkingen / Additional context

No response

[alextreme]

Discussed: The idea is that we add Groups with a relation to one or more object types. If a user is a member of such a Group their access to the objects is restricted based on which object types are linked to the Group

Examples on how this can be done: Open Inwoner (via Group->Onderwerp/Category), Belastingdienst Gegevensportalen (Group -> Portals)

Estimated at 3-4 days of work