Add changeset

Signed-off-by: Joe Porpeglia <josephp@spotify.com>
This commit is contained in:
Joe Porpeglia
2022-01-13 16:25:28 -05:00
committed by Joe Porpeglia
parent f911a60baf
commit ca2ee182c3
+9
View File
@@ -0,0 +1,9 @@
---
'@backstage/plugin-techdocs-backend': minor
---
**BREAKING**: The `cache` option is now required by `createRouter`.
Added catalog-based authorization to TechDocs backend. When permissions are enabled for Backstage (via the `permission.enabled` config) the current user must have read access to the doc's corresponding catalog entity. The backend will return a 404 if the current user doesn't have access.
Note: Custom TechDocs setups that expose docs without a corresponding catalog entity will not work with permissions enabled, but a solution for this will be provided in the future.