Merge pull request 'chore(guide): remove decommissioned QDS_ADMIN role (dead code)' (#7) from chore/purge-qds-admin-253 into develop

2026-07-08 12:41:48 -04:00
parent 7bc96eeaa7 d202a494ef
commit 76027ff251
1 changed files with 1 additions and 1 deletions
@@ -37,7 +37,7 @@ public class SecurityConfig {
                        .requestMatchers("/actuator/health", "/error").permitAll()
                        // Read-only guide API: any authenticated user (audience gating done in the controller)
                        .requestMatchers(HttpMethod.GET, "/api/v1/guide/**")
-                            .hasAnyRole("USER", "CUSTOMER", "ADMIN", "MSP_ADMIN", "QDS_ADMIN", "BCOS_ADMIN")
+                            .hasAnyRole("USER", "CUSTOMER", "ADMIN", "MSP_ADMIN", "BCOS_ADMIN")
                        .anyRequest().authenticated()
                )
                .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);