Add more security restriction

dbmdz · Jun 4, 2021 · 092b5c7 · 092b5c7
1 parent 4932111
commit 092b5c7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...n/src/main/java/de/digitalcollections/cudami/admin/config/SpringConfigSecurityWebapp.java b/...n/src/main/java/de/digitalcollections/cudami/admin/config/SpringConfigSecurityWebapp.java
@@ -52,7 +52,7 @@ protected void configure(HttpSecurity http) throws Exception {
 
     http.authorizeRequests()
         .antMatchers("/users/updatePassword")
-        .permitAll()
+        .hasAnyAuthority(Role.ADMIN.getAuthority(), Role.CONTENT_MANAGER.getAuthority())
         .antMatchers("/users/**")
         .hasAnyAuthority(Role.ADMIN.getAuthority())
         .anyRequest()