This is an automated email from the ASF dual-hosted git repository.

riemer pushed a commit to branch rel/0.98.0
in repository https://gitbox.apache.org/repos/asf/streampipes.git


The following commit(s) were added to refs/heads/rel/0.98.0 by this push:
     new d722eacbea fix: Only admins can see dashboard permissions dialog 
(#3901)
d722eacbea is described below

commit d722eacbeaae5c8e23755692c90f491d0c58c077
Author: Dominik Riemer <[email protected]>
AuthorDate: Tue Nov 11 14:34:06 2025 +0100

    fix: Only admins can see dashboard permissions dialog (#3901)
---
 .../apache/streampipes/rest/impl/datalake/DataLakeWidgetResource.java   | 2 +-
 .../dashboard-overview-table/dashboard-overview-table.component.html    | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git 
a/streampipes-rest/src/main/java/org/apache/streampipes/rest/impl/datalake/DataLakeWidgetResource.java
 
b/streampipes-rest/src/main/java/org/apache/streampipes/rest/impl/datalake/DataLakeWidgetResource.java
index 423e066d3c..fc840505c8 100644
--- 
a/streampipes-rest/src/main/java/org/apache/streampipes/rest/impl/datalake/DataLakeWidgetResource.java
+++ 
b/streampipes-rest/src/main/java/org/apache/streampipes/rest/impl/datalake/DataLakeWidgetResource.java
@@ -95,7 +95,7 @@ public class DataLakeWidgetResource extends 
AbstractAuthGuardedRestResource {
       produces = MediaType.APPLICATION_JSON_VALUE,
       consumes = MediaType.APPLICATION_JSON_VALUE
   )
-  @PreAuthorize("this.hasWriteAuthority() and 
hasPermission(#dataExplorerWidgetModel.elementId, 'WRITE')")
+  @PreAuthorize("this.hasWriteAuthority()")
   public ResponseEntity<DataExplorerWidgetModel> createDataExplorerWidget(
       @RequestBody DataExplorerWidgetModel dataExplorerWidgetModel) {
     return ok(resourceManager.create(dataExplorerWidgetModel, 
getAuthenticatedUserSid()));
diff --git 
a/ui/src/app/dashboard/components/overview/dashboard-overview-table/dashboard-overview-table.component.html
 
b/ui/src/app/dashboard/components/overview/dashboard-overview-table/dashboard-overview-table.component.html
index 2814907bd6..5896ad55de 100644
--- 
a/ui/src/app/dashboard/components/overview/dashboard-overview-table/dashboard-overview-table.component.html
+++ 
b/ui/src/app/dashboard/components/overview/dashboard-overview-table/dashboard-overview-table.component.html
@@ -123,6 +123,7 @@
                 }
                 <button
                     mat-menu-item
+                    *ngIf="isAdmin"
                     [attr.data-cy]="
                         'manage-dashboard-permissions-' + element.name
                     "

Reply via email to