RED-6265 - Bulk dossier stats endpoint does not return dossier stats of dossiers, for which the current dossier does not have access permissions

- update to VIEW_ACCESS
- remove deprecated
This commit is contained in:
devplant 2023-03-28 13:09:57 +03:00
parent 92279c631b
commit caf0b63daa
2 changed files with 1 additions and 3 deletions

View File

@ -38,7 +38,7 @@ public class DossierStatsController implements DossierStatsResource {
@Override @Override
@PreAuthorize("hasAuthority('" + READ_DOSSIER + "')") @PreAuthorize("hasAuthority('" + READ_DOSSIER + "')")
@PreFilter("hasPermission(filterObject, 'Dossier', 'ACCESS_OBJECT')") @PreFilter("hasPermission(filterObject, 'Dossier', 'VIEW_OBJECT')")
public List<DossierStats> getDossierStats(@RequestBody Set<String> dossierIds) { public List<DossierStats> getDossierStats(@RequestBody Set<String> dossierIds) {
return dossierIds.stream().map(dossierStatsService::getDossierStats).collect(Collectors.toList()); return dossierIds.stream().map(dossierStatsService::getDossierStats).collect(Collectors.toList());

View File

@ -26,7 +26,6 @@ public interface DossierStatsResource {
String DOSSIER_ID_PATH_PARAM = "/{" + DOSSIER_ID_PARAM + "}"; String DOSSIER_ID_PATH_PARAM = "/{" + DOSSIER_ID_PARAM + "}";
@Deprecated
@ResponseBody @ResponseBody
@ResponseStatus(value = HttpStatus.OK) @ResponseStatus(value = HttpStatus.OK)
@GetMapping(value = DOSSIER_STATS_REST_PATH + DOSSIER_ID_PATH_PARAM, produces = MediaType.APPLICATION_JSON_VALUE) @GetMapping(value = DOSSIER_STATS_REST_PATH + DOSSIER_ID_PATH_PARAM, produces = MediaType.APPLICATION_JSON_VALUE)
@ -35,7 +34,6 @@ public interface DossierStatsResource {
DossierStats getDossierStats(@PathVariable(DOSSIER_ID_PARAM) String dossierId); DossierStats getDossierStats(@PathVariable(DOSSIER_ID_PARAM) String dossierId);
@Deprecated
@ResponseBody @ResponseBody
@ResponseStatus(value = HttpStatus.OK) @ResponseStatus(value = HttpStatus.OK)
@PostMapping(value = DOSSIER_STATS_REST_PATH, produces = MediaType.APPLICATION_JSON_VALUE) @PostMapping(value = DOSSIER_STATS_REST_PATH, produces = MediaType.APPLICATION_JSON_VALUE)