Skip to content

Commit c4f2d68

Browse files
hbenaliexo-swf
authored andcommitted
fix: Restrict associated connector username retreival to administrators (#1802)
As requested by #1801 exchanges, this PR will restrict the associated username with connector user identifier to platform admins to avoid communicating the username to normal users
1 parent c673b9e commit c4f2d68

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

services/src/main/java/io/meeds/gamification/rest/ConnectorRest.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -95,7 +95,7 @@ public Response getConnectors(
9595

9696
@GET
9797
@Produces(MediaType.TEXT_PLAIN)
98-
@RolesAllowed("users")
98+
@RolesAllowed("administrators")
9999
@Path("username/{connectorName}")
100100
@Operation(summary = "Retrieve the username associated with a connector user identifier.", description = "Fetches the username corresponding to the given connector user identifier.", method = "GET")
101101
@ApiResponses(value = {

0 commit comments

Comments
 (0)