public discovery authz todo

bento-platform · Jul 16, 2024 · 7ea3925 · 7ea3925
1 parent fd96250
commit 7ea3925
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/chord_metadata_service/patients/api_views.py b/chord_metadata_service/patients/api_views.py
@@ -151,6 +151,7 @@ async def public_discovery_filter_queryset(request: DrfRequest, queryset: QueryS
     # Check query parameters validity
     qp = request.query_params
     discovery = await get_request_discovery(request)
+    # TODO: allow exceeding max query parameters for authorized requests
     if len(qp) > get_max_query_parameters(discovery, low_counts_censored):
         raise ValidationError(f"Wrong number of fields: {len(qp)}")