From: Olivier Lamy Date: Sun, 26 Feb 2012 16:58:30 +0000 (+0000) Subject: authz not mandatory for search: repositories list limited for guest X-Git-Tag: archiva-1.4-M3~1222 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=2538f012b5aa9cea3774be1016c481eb37b306da;p=archiva.git authz not mandatory for search: repositories list limited for guest git-svn-id: https://svn.apache.org/repos/asf/archiva/trunk@1293870 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java b/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java index 6ee916a39..4f6f06e95 100644 --- a/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java +++ b/archiva-modules/archiva-web/archiva-rest/archiva-rest-api/src/main/java/org/apache/archiva/rest/api/services/SearchService.java @@ -48,7 +48,7 @@ public interface SearchService @Path( "quickSearch" ) @GET @Produces( { MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML } ) - @RedbackAuthorization( noPermission = true, noRestriction = false ) + @RedbackAuthorization( noPermission = true, noRestriction = true ) /** * search will be apply on all repositories the current user has karma */ @@ -58,7 +58,7 @@ public interface SearchService @Path( "getArtifactVersions" ) @GET @Produces( { MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML } ) - @RedbackAuthorization( noPermission = true, noRestriction = false ) + @RedbackAuthorization( noPermission = true, noRestriction = true ) /** * search will be apply on all repositories the current user has karma */ @@ -70,7 +70,7 @@ public interface SearchService @Path( "searchArtifacts" ) @POST @Produces( { MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML } ) - @RedbackAuthorization( noPermission = true, noRestriction = false ) + @RedbackAuthorization( noPermission = true, noRestriction = true ) /** * If searchRequest contains repositories, the search will be done only on those repositories. * if no repositories, the search will be apply on all repositories the current user has karma