AWS solutions documentation change
Summary
Added detailed permissions-based action list schema, removed OPTIONS method docs, and expanded response model
Security assessment
Documents granular access control actions (e.g., VIEW_CASE_DETAILS, DOWNLOAD) which relate to security permissions, but does not indicate a security flaw being fixed.
Diff
diff --git a/solutions/latest/dea-api/cases-caseid-actions.md b/solutions/latest/dea-api/cases-caseid-actions.md index 0553f9727..f3b61288e 100644 --- a//solutions/latest/dea-api/cases-caseid-actions.md +++ b//solutions/latest/dea-api/cases-caseid-actions.md @@ -5 +5 @@ -URIHTTP methods +URIHTTP methodsSchemasProperties @@ -7 +7,3 @@ URIHTTP methods -# Cases caseId Actions +# Cases – Available actions by caseId + +Requests to the /cases/{caseId}/actions endpoint returns a list of actions that can be performed on the specified case based on the permissions of the requesting user. @@ -23,6 +24,0 @@ Path parametersName| Type| Required| Description -### OPTIONS - -Path parametersName| Type| Required| Description ----|---|---|--- -`caseId`| String| True| - @@ -31 +27,57 @@ ResponsesStatus code| Response model| Description -`204`| None| 204 response +`200`| `CaseUser`| Success + +## Schemas + +### Response bodies + + + { + "userUlid": "string", + "caseUlid": "string", + "actions": [ + enum + ], + "caseName": "string", + "userFirstName": "string", + "userLastName": "string", + "created": "string", + "updated": "string" + } + +## Properties + +### CaseAction + + * `VIEW_CASE_DETAILS` + + * `UPDATE_CASE_DETAILS` + + * `UPDATE_CASE_STATUS` + + * `UPLOAD` + + * `DOWNLOAD` + + * `VIEW_FILES` + + * `CASE_AUDIT` + + * `INVITE` + + * `RESTORE_FILES` + + + + +### CaseUser + +Property| Type| Required| Description +---|---|---|--- +`actions`| Array of type CaseAction| False| +`caseName`| string| False| +`caseUlid`| string| False| +`created`| string| False| +`updated`| string| False| +`userFirstName`| string| False| +`userLastName`| string| False| +`userUlid`| string| False| @@ -39 +91 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Cases All-cases +Cases – Audit by caseId @@ -41 +93 @@ Cases All-cases -Cases caseId Audit +Cases – Case details by caseId