From d202a494ef3bdabdc44b2e1e62b8435901ff3fb0 Mon Sep 17 00:00:00 2001 From: Johannes Date: Tue, 7 Jul 2026 22:35:38 -0400 Subject: [PATCH] chore(guide): remove decommissioned QDS_ADMIN role reference (dead code) QDS_ADMIN was removed from the hiveops-auth Role enum (972a28a); no JWT can carry ROLE_QDS_ADMIN. Strip the stale SecurityConfig hasAnyRole entry. Zero runtime change. Refs hiveiq-src/hiveops-incident#253 Co-Authored-By: Claude Opus 4.8 --- .../src/main/java/com/hiveops/guide/config/SecurityConfig.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/src/main/java/com/hiveops/guide/config/SecurityConfig.java b/backend/src/main/java/com/hiveops/guide/config/SecurityConfig.java index 5e4f82d..0b95c3e 100644 --- a/backend/src/main/java/com/hiveops/guide/config/SecurityConfig.java +++ b/backend/src/main/java/com/hiveops/guide/config/SecurityConfig.java @@ -37,7 +37,7 @@ public class SecurityConfig { .requestMatchers("/actuator/health", "/error").permitAll() // Read-only guide API: any authenticated user (audience gating done in the controller) .requestMatchers(HttpMethod.GET, "/api/v1/guide/**") - .hasAnyRole("USER", "CUSTOMER", "ADMIN", "MSP_ADMIN", "QDS_ADMIN", "BCOS_ADMIN") + .hasAnyRole("USER", "CUSTOMER", "ADMIN", "MSP_ADMIN", "BCOS_ADMIN") .anyRequest().authenticated() ) .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);