David Griffon created UNOMI-825:
-----------------------------------

             Summary: Hide some profile properties from context request when 
requirered is set to with all (*) 
                 Key: UNOMI-825
                 URL: https://issues.apache.org/jira/browse/UNOMI-825
             Project: Apache Unomi
          Issue Type: Task
            Reporter: David Griffon


To prevent access to all property names when such event is sent to the context 
endpoint:
{code}
{
        "requiredProfileProperties": [
                "*"
        ],

        "events": [
                
        ]
}
{code}

We need to introduce a mechanism that hides select profile properties in the 
response. 

A new system tag is added at property type level named: *concealed*, when set 
the property is only returned if accessed directly. 

h3. Use cases
For a given property type *myType* with the system tag *concealed* 
A profile with that property set only. 
the following payload:
{code}
{
        "requiredProfileProperties": [
                "*"
        ],
...
{code}
returns no property
{code}
{
        "requiredProfileProperties": [
                "myType"
        ],
...
{code}
returns the property
{code}
{
        "requiredProfileProperties": [
                "*",
                "myType"
        ],
...
{code}
returns the property



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to