Fix Guard

Author: mms-gianni

server/src/config/config.controller.ts

@@ -34,7 +34,8 @@ export class ConfigController {
   }
 
   @Post('/')
-  @UseGuards(JwtAuthGuard)
+  @UseGuards(JwtAuthGuard, PermissionsGuard)
+  @Permissions('config:write')
   @UseGuards(ReadonlyGuard)
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Update the Kubero settings' })
@@ -50,7 +51,7 @@ export class ConfigController {
 
   @Get('/banner')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the banner informations' })
   @ApiForbiddenResponse({
@@ -64,7 +65,7 @@ export class ConfigController {
 
   @Get('/templates')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the templates settings' })
   @ApiForbiddenResponse({
@@ -78,7 +79,7 @@ export class ConfigController {
 
   @Get('/registry')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the registry settings' })
   @ApiForbiddenResponse({
@@ -92,7 +93,7 @@ export class ConfigController {
 
   @Get('/runpacks')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'List runpacks' })
   @ApiForbiddenResponse({
@@ -106,7 +107,7 @@ export class ConfigController {
 
   @Delete('/runpacks/:id')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read', 'config:write')
+  @Permissions('config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Delete a runpack' })
   @ApiForbiddenResponse({
@@ -121,7 +122,7 @@ export class ConfigController {
 
   @Post('/runpacks')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('config:read', 'config:write')
+  @Permissions('config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Add a new runpack' })
   @ApiForbiddenResponse({
@@ -153,7 +154,7 @@ export class ConfigController {
 
   @Get('/clusterissuer')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiOperation({ summary: 'Get the configured cluster issuer' })
   @ApiForbiddenResponse({
@@ -174,7 +175,7 @@ export class ConfigController {
 
   @Get('/podsizes')
   @UseGuards(JwtAuthGuard, PermissionsGuard)
-  @Permissions('config:read')
+  @Permissions('config:read', 'config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',
@@ -188,7 +189,7 @@ export class ConfigController {
 
   @Post('/podsizes')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('config:read', 'config:write')
+  @Permissions('config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',
@@ -252,7 +253,7 @@ export class ConfigController {
 
   @Delete('/podsizes/:id')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('config:read', 'config:write')
+  @Permissions('config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',
@@ -270,7 +271,7 @@ export class ConfigController {
 
   @Put('/podsizes/:id')
   @UseGuards(JwtAuthGuard, PermissionsGuard, ReadonlyGuard)
-  @Permissions('config:read', 'config:write')
+  @Permissions('config:write')
   @ApiBearerAuth('bearerAuth')
   @ApiForbiddenResponse({
     description: 'Error: Unauthorized',