From ca2ee182c36895e73bf23db74c58a6a2bb17f3c3 Mon Sep 17 00:00:00 2001 From: Joe Porpeglia Date: Thu, 13 Jan 2022 16:25:28 -0500 Subject: [PATCH] Add changeset Signed-off-by: Joe Porpeglia --- .changeset/giant-bees-speak.md | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .changeset/giant-bees-speak.md diff --git a/.changeset/giant-bees-speak.md b/.changeset/giant-bees-speak.md new file mode 100644 index 0000000000..65362e1c3c --- /dev/null +++ b/.changeset/giant-bees-speak.md @@ -0,0 +1,9 @@ +--- +'@backstage/plugin-techdocs-backend': minor +--- + +**BREAKING**: The `cache` option is now required by `createRouter`. + +Added catalog-based authorization to TechDocs backend. When permissions are enabled for Backstage (via the `permission.enabled` config) the current user must have read access to the doc's corresponding catalog entity. The backend will return a 404 if the current user doesn't have access. + +Note: Custom TechDocs setups that expose docs without a corresponding catalog entity will not work with permissions enabled, but a solution for this will be provided in the future.