Merge pull request #209 from InseeFr/devSchedulerAuthorization

1.5.4 : Kraftwerk users can create and delete schedules

Author: loichenninger

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.5.4 [2025-04-24]
+### Fixed
+- kraftwerk users can create and delete schedules
+
 ## 1.5.3 [2025-04-24]
 ### Added
 - Add transformation from raw data to Genesis model

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>fr.insee.genesis</groupId>
     <artifactId>genesis-api</artifactId>
-    <version>1.5.3</version>
+    <version>1.5.4</version>
     <packaging>jar</packaging>
     <name>genesis-api</name>
 

src/main/java/fr/insee/genesis/controller/rest/ScheduleController.java

@@ -61,7 +61,7 @@ public ResponseEntity<Object> getAllSchedules() {
 
     @Operation(summary = "Schedule a Kraftwerk execution")
     @PutMapping(path = "/create")
-    @PreAuthorize("hasRole('ADMIN')")
+    @PreAuthorize("hasRole('USER_KRAFTWERK')")
     public ResponseEntity<Object> addSchedule(
             @Parameter(description = "Survey name to call Kraftwerk on") @RequestParam("surveyName") String surveyName,
             @Parameter(description = "Kraftwerk endpoint") @RequestParam(value = "serviceTocall", defaultValue = Constants.KRAFTWERK_MAIN_ENDPOINT) ServiceToCall serviceToCall,
@@ -109,7 +109,7 @@ public ResponseEntity<Object> addSchedule(
 
     @Operation(summary = "Delete a Kraftwerk execution schedule(s) by its survey name")
     @DeleteMapping(path = "/delete")
-    @PreAuthorize("hasRole('ADMIN')")
+    @PreAuthorize("hasRole('USER_KRAFTWERK')")
     public ResponseEntity<Object> deleteSchedule(
             @Parameter(description = "Survey name of the schedule(s) to delete") @RequestParam("surveyName") String surveyName
     ){