Repository: incubator-nifi Updated Branches: refs/heads/NIFI-65 71ab084d3 -> 7a29166d9
NIFI-65: - Only requiring ROLE_PROVENANCE for downloading content as the AuthorityProvider is able to make authorization decisions based on FlowFile attributes. - Requiring ROLE_PROVENANCE and ROLE_DFM to submit a replay request. Project: http://git-wip-us.apache.org/repos/asf/incubator-nifi/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-nifi/commit/1f4ae730 Tree: http://git-wip-us.apache.org/repos/asf/incubator-nifi/tree/1f4ae730 Diff: http://git-wip-us.apache.org/repos/asf/incubator-nifi/diff/1f4ae730 Branch: refs/heads/NIFI-65 Commit: 1f4ae7306584d3cd524c08c19886001456df5fce Parents: 71ab084 Author: Matt Gilman <[email protected]> Authored: Tue Dec 23 10:27:09 2014 -0500 Committer: Matt Gilman <[email protected]> Committed: Tue Dec 23 10:27:09 2014 -0500 ---------------------------------------------------------------------- .../main/java/org/apache/nifi/web/api/ProvenanceResource.java | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-nifi/blob/1f4ae730/nar-bundles/framework-bundle/framework/web/nifi-web-api/src/main/java/org/apache/nifi/web/api/ProvenanceResource.java ---------------------------------------------------------------------- diff --git a/nar-bundles/framework-bundle/framework/web/nifi-web-api/src/main/java/org/apache/nifi/web/api/ProvenanceResource.java b/nar-bundles/framework-bundle/framework/web/nifi-web-api/src/main/java/org/apache/nifi/web/api/ProvenanceResource.java index 2da7828..24bdf0c 100644 --- a/nar-bundles/framework-bundle/framework/web/nifi-web-api/src/main/java/org/apache/nifi/web/api/ProvenanceResource.java +++ b/nar-bundles/framework-bundle/framework/web/nifi-web-api/src/main/java/org/apache/nifi/web/api/ProvenanceResource.java @@ -160,7 +160,7 @@ public class ProvenanceResource extends ApplicationResource { */ @POST @Produces({MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML}) - @PreAuthorize("hasRole('ROLE_PROVENANCE')") + @PreAuthorize("hasRole('ROLE_PROVENANCE') and hasRole('ROLE_DFM')") @Path("/replays") @TypeHint(ProvenanceEventEntity.class) public Response submitReplay( @@ -231,7 +231,7 @@ public class ProvenanceResource extends ApplicationResource { @GET @Produces(MediaType.APPLICATION_OCTET_STREAM) @Path("/events/{id}/content/input") - @PreAuthorize("hasRole('ROLE_PROVENANCE') and hasRole('ROLE_DFM')") + @PreAuthorize("hasRole('ROLE_PROVENANCE')") public Response getInputContent( @QueryParam(CLIENT_ID) @DefaultValue(StringUtils.EMPTY) ClientIdParameter clientId, @QueryParam("clusterNodeId") String clusterNodeId, @@ -305,7 +305,7 @@ public class ProvenanceResource extends ApplicationResource { @GET @Produces(MediaType.APPLICATION_OCTET_STREAM) @Path("/events/{id}/content/output") - @PreAuthorize("hasRole('ROLE_PROVENANCE') and hasRole('ROLE_DFM')") + @PreAuthorize("hasRole('ROLE_PROVENANCE')") public Response getOutputContent( @QueryParam(CLIENT_ID) @DefaultValue(StringUtils.EMPTY) ClientIdParameter clientId, @QueryParam("clusterNodeId") String clusterNodeId,
