From: Olivier Lamy <olamy@apache.org>
Date: Sun, 26 Feb 2012 16:58:30 +0000 (+0000)
Subject: authz not mandatory for search: repositories list limited for guest
X-Git-Tag: archiva-1.4-M3~1222
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=2538f012b5aa9cea3774be1016c481eb37b306da;p=archiva.git

authz not mandatory for search: repositories list limited for guest

git-svn-id: https://svn.apache.org/repos/asf/archiva/trunk@1293870 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java b/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java
index 6ee916a39..4f6f06e95 100644
--- a/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java
+++ b/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java
@@ -48,7 +48,7 @@ public interface SearchService
     @Path( "quickSearch" )
     @GET
     @Produces( { MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML } )
-    @RedbackAuthorization( noPermission = true, noRestriction = false )
+    @RedbackAuthorization( noPermission = true, noRestriction = true )
     /**
      * <b>search will be apply on all repositories the current user has karma</b>
      */
@@ -58,7 +58,7 @@ public interface SearchService
     @Path( "getArtifactVersions" )
     @GET
     @Produces( { MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML } )
-    @RedbackAuthorization( noPermission = true, noRestriction = false )
+    @RedbackAuthorization( noPermission = true, noRestriction = true )
     /**
      * <b>search will be apply on all repositories the current user has karma</b>
      */
@@ -70,7 +70,7 @@ public interface SearchService
     @Path( "searchArtifacts" )
     @POST
     @Produces( { MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML } )
-    @RedbackAuthorization( noPermission = true, noRestriction = false )
+    @RedbackAuthorization( noPermission = true, noRestriction = true )
     /**
      * If searchRequest contains repositories, the search will be done only on those repositories.
      * <b>if no repositories, the search will be apply on all repositories the current user has karma</b>