sergehuber opened a new pull request, #853: URL: https://github.com/apache/unomi/pull/853
A router import or export configuration carries a Camel source or destination URI, so writing one reaches the filesystem and remote endpoints. That is a host-level capability rather than one confined to a tenant's own data, and it should require the corresponding role. ImportConfigurationServiceEndPoint and ExportConfigurationServiceEndPoint now require UnomiRoles.ADMINISTRATOR, on the oneshot and multipart upload paths as well as the CRUD ones. RouterEndpointRoleSecurityIT exercises all four over HTTP rather than inspecting the annotations. A role annotation that is present but not wired - an endpoint outside the security filter's scope, say - would still satisfy a unit test that only reads the annotation. Jira: https://issues.apache.org/jira/browse/UNOMI-977 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
