Github user kevdoran commented on a diff in the pull request:

    https://github.com/apache/nifi-registry/pull/148#discussion_r236827312
  
    --- Diff: 
nifi-registry-core/nifi-registry-web-api/src/main/java/org/apache/nifi/registry/web/api/ExtensionRepositoryResource.java
 ---
    @@ -0,0 +1,378 @@
    +/*
    + * Licensed to the Apache Software Foundation (ASF) under one or more
    + * contributor license agreements.  See the NOTICE file distributed with
    + * this work for additional information regarding copyright ownership.
    + * The ASF licenses this file to You under the Apache License, Version 2.0
    + * (the "License"); you may not use this file except in compliance with
    + * the License.  You may obtain a copy of the License at
    + *
    + *     http://www.apache.org/licenses/LICENSE-2.0
    + *
    + * Unless required by applicable law or agreed to in writing, software
    + * distributed under the License is distributed on an "AS IS" BASIS,
    + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    + * See the License for the specific language governing permissions and
    + * limitations under the License.
    + */
    +package org.apache.nifi.registry.web.api;
    +
    +import io.swagger.annotations.Api;
    +import io.swagger.annotations.ApiOperation;
    +import io.swagger.annotations.ApiParam;
    +import io.swagger.annotations.ApiResponse;
    +import io.swagger.annotations.ApiResponses;
    +import io.swagger.annotations.Authorization;
    +import io.swagger.annotations.Extension;
    +import io.swagger.annotations.ExtensionProperty;
    +import org.apache.nifi.registry.bucket.Bucket;
    +import org.apache.nifi.registry.bucket.BucketItem;
    +import org.apache.nifi.registry.event.EventService;
    +import org.apache.nifi.registry.extension.ExtensionBundleVersion;
    +import org.apache.nifi.registry.extension.repo.ExtensionRepoArtifact;
    +import org.apache.nifi.registry.extension.repo.ExtensionRepoBucket;
    +import org.apache.nifi.registry.extension.repo.ExtensionRepoGroup;
    +import org.apache.nifi.registry.extension.repo.ExtensionRepoVersion;
    +import org.apache.nifi.registry.extension.repo.ExtensionRepoVersionSummary;
    +import org.apache.nifi.registry.security.authorization.RequestAction;
    +import org.apache.nifi.registry.service.AuthorizationService;
    +import org.apache.nifi.registry.service.RegistryService;
    +import 
org.apache.nifi.registry.service.extension.ExtensionBundleVersionCoordinate;
    +import org.apache.nifi.registry.web.link.LinkService;
    +import org.springframework.beans.factory.annotation.Autowired;
    +import org.springframework.stereotype.Component;
    +
    +import javax.ws.rs.Consumes;
    +import javax.ws.rs.GET;
    +import javax.ws.rs.Path;
    +import javax.ws.rs.PathParam;
    +import javax.ws.rs.Produces;
    +import javax.ws.rs.core.Link;
    +import javax.ws.rs.core.MediaType;
    +import javax.ws.rs.core.Response;
    +import javax.ws.rs.core.StreamingOutput;
    +import java.util.ArrayList;
    +import java.util.Set;
    +import java.util.SortedSet;
    +
    +@Component
    +@Path("/extensions/repo")
    +@Api(
    +        value = "extension_repository",
    +        description = "Interact with extension bundles via the hierarchy 
of bucket/group/artifact/version.",
    +        authorizations = { @Authorization("Authorization") }
    +)
    +public class ExtensionRepositoryResource extends 
AuthorizableApplicationResource {
    +
    +    public static final String CONTENT_DISPOSITION_HEADER = 
"content-disposition";
    +    private final RegistryService registryService;
    +    private final LinkService linkService;
    +
    +    @Autowired
    +    public ExtensionRepositoryResource(
    +            final RegistryService registryService,
    +            final LinkService linkService,
    +            final AuthorizationService authorizationService,
    +            final EventService eventService) {
    +        super(authorizationService, eventService);
    +        this.registryService = registryService;
    +        this.linkService = linkService;
    +    }
    +
    +    @GET
    +    @Consumes(MediaType.WILDCARD)
    +    @Produces(MediaType.APPLICATION_JSON)
    +    @ApiOperation(
    +            value = "Gets the names of the buckets the current user is 
authorized for in order to browse the repo by bucket",
    +            response = ExtensionRepoBucket.class,
    +            responseContainer = "List",
    +            extensions = {
    +                    @Extension(name = "access-policy", properties = {
    +                            @ExtensionProperty(name = "action", value = 
"read"),
    +                            @ExtensionProperty(name = "resource", value = 
"/buckets/{bucketId}") })
    +            }
    --- End diff --
    
    I don't think we want an access-policy documented here as read only access 
is allowed for all authenticated users.


---

Reply via email to