Process/DecisionDefinition Xml endpoint don't authorize

XMLWordPrintable

    • Type: Bug Report
    • Resolution: Fixed
    • Priority: L3 - Default
    • 2.3.0
    • Affects Version/s: None
    • Component/s: backend
    • None

      Currently every user who has access to optimize can access any xml no matter if he is authorized to.

      AT:

      • decision and process definition endpoints are only accessible if the user is authorized to read the particular definition
      • as part of refactoring aling the implementation of ProcessDefinitionReader and DecisionDefinitionReader:
        • throw NotFoundexception from RestService instead from reader
        • return Optional<String> for get*DefinitionXml don't throw exception on just missing xml

            Assignee:
            Unassigned
            Reporter:
            Sebastian Bathke
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: