Skip to content
Snippets Groups Projects
Commit eea373c0 authored by Piotr Gawron's avatar Piotr Gawron
Browse files

curator with read access should also be able to create overlays

parent 2e8ba43c
No related branches found
No related tags found
1 merge request!956Resolve "Curator can add overlay if granted with View project only"
Hide whitespace changes
Inline Side-by-side
rest-api/src/main/java/lcsb/mapviewer/api/projects/overlays/OverlayController.java
+ 1
− 0
View file @ eea373c0
...@@ -102,6 +102,7 @@ public class OverlayController extends BaseController { ...@@ -102,6 +102,7 @@ public class OverlayController extends BaseController {
@PreAuthorize("hasAuthority('IS_ADMIN')" + @PreAuthorize("hasAuthority('IS_ADMIN')" +
" or (hasAuthority('IS_CURATOR') and hasAuthority('WRITE_PROJECT:' + #projectId))" + " or (hasAuthority('IS_CURATOR') and hasAuthority('WRITE_PROJECT:' + #projectId))" +
" or (hasAuthority('IS_CURATOR') and hasAuthority('READ_PROJECT:' + #projectId))" +
" or (hasAuthority('READ_PROJECT:' + #projectId) and hasAuthority('CAN_CREATE_OVERLAYS'))") " or (hasAuthority('READ_PROJECT:' + #projectId) and hasAuthority('CAN_CREATE_OVERLAYS'))")
@PostMapping(value = "/") @PostMapping(value = "/")
public Map<String, Object> addOverlay( public Map<String, Object> addOverlay(
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment