Business need
To avoid misuse of fields on the Report object that we know are only to be managed by the api, we need to make them read-only. We do not want users to have the ability to tamper with data, even if it is their own, so that we can maintain integrity with our auditing if needed.
Needs further analysis and requirements gathering
TASK: Make system managed report fields read-only. One straightforward way of approaching this would be flagging them as read_only in the serializers.
Create a follow up ticket to audit and address other record types
QA Notes
null
DEV Notes
null
Design
null
See full ticket and images here: FECFILE-3382
Business need
To avoid misuse of fields on the Report object that we know are only to be managed by the api, we need to make them read-only. We do not want users to have the ability to tamper with data, even if it is their own, so that we can maintain integrity with our auditing if needed.
Needs further analysis and requirements gathering
TASK: Make system managed report fields read-only. One straightforward way of approaching this would be flagging them as read_only in the serializers.
Create a follow up ticket to audit and address other record types
QA Notes
null
DEV Notes
null
Design
null
See full ticket and images here: FECFILE-3382