Admin only secured operation

ligoj · Sep 24, 2023 · 1c00864 · 1c00864
1 parent 2cf8376
commit 1c00864
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/plugin-core/src/main/java/org/ligoj/app/resource/node/ParameterValueResource.java b/plugin-core/src/main/java/org/ligoj/app/resource/node/ParameterValueResource.java
@@ -29,6 +29,7 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.cache.CacheManager;
 import org.springframework.data.domain.Persistable;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.stereotype.Service;
 
 import javax.cache.annotation.CacheKey;
@@ -637,6 +638,7 @@ public List<ParameterNodeVo> getNodeParameters(@PathParam("node") final String n
 	 * mode.
 	 */
 	@GET
+	@PreAuthorize("hasAuthority('ADMIN')")
 	@Path("{node:service:.+}/parameter-value/{mode}/secured")
 	public List<ParameterNodeVo> getNodeParametersSecured(@PathParam("node") final String node,
 			@PathParam("mode") final SubscriptionMode mode) {