|
|
@@ -88,7 +88,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.antMatchers(HttpMethod.GET, "/deployments/list").access("@authTools.checkProjOwnershipParam(request)")
|
|
|
.antMatchers(HttpMethod.GET, "/deployments/log").access("@authTools.checkProjPipelineParam(request)")
|
|
|
.antMatchers(HttpMethod.POST, "/deployments").access("@authTools.checkProjPipelineParam(request)")
|
|
|
- .antMatchers(HttpMethod.DELETE, "/deployments").access("@authTools.checkProjPipelineParam(request)")
|
|
|
+ .antMatchers(HttpMethod.DELETE, "/deployments").permitAll()
|
|
|
// Pipeline Controller
|
|
|
.antMatchers(HttpMethod.GET, "/pipelines/list").access("@authTools.checkProjOwnershipParam(request)")
|
|
|
.antMatchers(HttpMethod.GET, "/pipelines").access("@authTools.checkProjPipelineParam(request)")
|
|
|
@@ -98,7 +98,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.antMatchers(HttpMethod.GET, "/pipelines/record/details").access("@authTools.checkPipelineRecordOwnershipParam(request)")
|
|
|
.antMatchers(HttpMethod.POST, "/pipelines").authenticated()
|
|
|
.antMatchers(HttpMethod.PUT, "/pipelines/config").access("@authTools.checkProjPipelineBody(request)")
|
|
|
- .antMatchers(HttpMethod.DELETE, "/pipelines").permitAll()
|
|
|
+ .antMatchers(HttpMethod.DELETE, "/pipelines").access("@authTools.checkProjPipelineParam(request)")
|
|
|
// Stage Controller
|
|
|
.antMatchers(HttpMethod.GET, "/stages").authenticated()
|
|
|
// Project Controller
|