wazo-calld: Gives access to users CDR recordings

Description

Currently only administrator access can download CDR recordings. An application user is not able to download his own recordings

Expect to have new endpoint for end-user.

We must define endpoint to expose first, but here’s all existing API that can be ported

  • POST /cdr/recordings/media/export (expect to remove user_uuid filter)

  • DELETE /cdr/{cdr_id}/recordings/{recording_uuid}/media

  • GET /cdr/{cdr_id}/recordings/{recording_uuid}/media

  • DELETE /cdr/recordings/media (bulk delete)

The following routes need to be implemented

  • POST /users/me/cdr/recordings/media/export Should limit users_uuid to the user doing the query

  • GET /users/me/exports/<export_uuid>/download Should validate that the user is the one that created the export

  • GET /users/me/exports/<export_uuid> Should validate that the user is the one that created the export

  • GET /users/me/cdr/<cdr_id>/recordings/<recording_uuid>/media Should be limited to the user's CDR

  • DELETE /users/me/cdr/<cdr_id>/recordings/<recording_uuid>/media Should be limited to the user's CDR

that’s 5 URL that already exists that need to be replicated with a user filter and the test that are required for them.

Zendesk Ticket IDs

None

Activity

Show:

Francis Chartrand August 14, 2024 at 5:32 PM

See split to tasks

Francis Chartrand August 13, 2024 at 1:21 PM

This task will be splitted, here’s the SP and in order of priority.

  • Get a CDR recording(s): 2 SP

  • Export ZIP: 2 SP

  • Delete a recording(s): 2 SP

  • Get a single CDR data: 2 SP

Duplicate

Details

Priority

Assignee

Reporter

Fix versions

Sprint

Story Points

Zendesk Support

Created February 22, 2024 at 3:43 PM
Updated August 28, 2024 at 6:08 PM
Resolved August 14, 2024 at 5:32 PM