openhab-core/bundles/org.openhab.core.io.rest.sse/src
Yannick Schaus d262b6f5bc
Add missing roles checks (#1739)
(I included these fixes in #1735 but extracted them in a stanalone
PR because it's easier to review and a little more urgent.)

As a result of the refactoring in #1713, the operations annotated with
`@RolesAllowed` containing `Role.USER` are not anymore automatically
considered accessible to all users, regardless of their actual roles.

4 operations are therefore now denied to admins if they only have the
`Role.ADMIN` role, as the first admininistrator is created only with
that role the UI encounters unexpected access denied errors and breaks.
(See https://github.com/openhab/openhab-webui/issues/422).

Closes https://github.com/openhab/openhab-webui/issues/422.

Signed-off-by: Yannick Schaus <github@schaus.net>
2020-10-20 08:20:39 +02:00
..
main/java/org/openhab/core/io/rest/sse Add missing roles checks (#1739) 2020-10-20 08:20:39 +02:00
test/java/org/openhab/core/io/rest/sse/internal/util Use "openhab" event topic prefix (#1587) 2020-08-11 21:16:49 +02:00