- FIX: Fixed permission issue with projects.

germinateplatform · Jan 30, 2025 · bed7957 · bed7957
1 parent dca19eb
commit bed7957
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/java/jhi/germinate/server/resource/projects/ProjectResource.java b/src/main/java/jhi/germinate/server/resource/projects/ProjectResource.java
@@ -27,7 +27,6 @@
 import static jhi.germinate.server.database.codegen.tables.Projects.PROJECTS;
 
 @Path("project")
-@Secured(UserType.DATA_CURATOR)
 public class ProjectResource
 {
 	@GET
@@ -62,6 +61,7 @@ public Response getProjectStats(@PathParam("projectId") Integer projectId)
 	@POST
 	@Consumes(MediaType.MULTIPART_FORM_DATA)
 	@Produces(MediaType.APPLICATION_JSON)
+	@Secured(UserType.DATA_CURATOR)
 	public Response postProject(@FormDataParam("name") String name,
 								@FormDataParam("description") String description,
 								@FormDataParam("pageContent") String pageContent,
@@ -148,6 +148,7 @@ public Response postProject(@FormDataParam("name") String name,
 	@Path("/{projectId:\\d+}")
 	@Consumes(MediaType.MULTIPART_FORM_DATA)
 	@Produces(MediaType.APPLICATION_JSON)
+	@Secured(UserType.DATA_CURATOR)
 	public Response patchProject(@PathParam("projectId") Integer projectId,
 								 @FormDataParam("name") String name,
 								 @FormDataParam("description") String description,
@@ -252,6 +253,7 @@ public Response patchProject(@PathParam("projectId") Integer projectId,
 	@Path("/{projectId:\\d+}")
 	@Consumes(MediaType.APPLICATION_JSON)
 	@Produces(MediaType.APPLICATION_JSON)
+	@Secured(UserType.DATA_CURATOR)
 	public Response deleteProject(@PathParam("projectId") Integer projectId)
 			throws SQLException
 	{