chore(guide): remove decommissioned QDS_ADMIN role (dead code) #7
@@ -37,7 +37,7 @@ public class SecurityConfig {
|
|||||||
.requestMatchers("/actuator/health", "/error").permitAll()
|
.requestMatchers("/actuator/health", "/error").permitAll()
|
||||||
// Read-only guide API: any authenticated user (audience gating done in the controller)
|
// Read-only guide API: any authenticated user (audience gating done in the controller)
|
||||||
.requestMatchers(HttpMethod.GET, "/api/v1/guide/**")
|
.requestMatchers(HttpMethod.GET, "/api/v1/guide/**")
|
||||||
.hasAnyRole("USER", "CUSTOMER", "ADMIN", "MSP_ADMIN", "QDS_ADMIN", "BCOS_ADMIN")
|
.hasAnyRole("USER", "CUSTOMER", "ADMIN", "MSP_ADMIN", "BCOS_ADMIN")
|
||||||
.anyRequest().authenticated()
|
.anyRequest().authenticated()
|
||||||
)
|
)
|
||||||
.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
|
.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);
|
||||||
|
|||||||
Reference in New Issue
Block a user