# Summary Apply rbac on all external apps api's, enforce in rest handler's - app listing - helper api - app detail - resource tree - manifest and values - # Proposal How do you think this should be implemented?