Open all swagger-requested endpoints

[portal/ric-dashboard.git] / webapp-backend / src / main / java / org / oransc / ric / portal / dashboard / controller / AdminController.java

diff --git a/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java b/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java
index 86a7700..262f999 100644 (file)
--- a/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java
+++ b/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java
@@ -28,6 +28,7 @@ import org.oransc.ric.portal.dashboard.model.SuccessTransport;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.http.MediaType;
+import org.springframework.security.access.annotation.Secured;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
@@ -66,21 +67,26 @@ public class AdminController {
 
        @ApiOperation(value = "Gets the Dashboard MANIFEST.MF property Implementation-Version.", response = SuccessTransport.class)
        @GetMapping(VERSION_METHOD)
+       // No role required
        public SuccessTransport getVersion() {
-               logger.debug("getVersion");
+               // These endpoints are invoked repeatedly by K8S
+               logger.trace("getVersion");
                return new SuccessTransport(200,
                                DashboardApplication.getImplementationVersion(MethodHandles.lookup().lookupClass()));
        }
 
        @ApiOperation(value = "Checks the health of the application.", response = SuccessTransport.class)
        @GetMapping(HEALTH_METHOD)
+       // No role required
        public SuccessTransport getHealth() {
-               logger.debug("getHealth");
+               // These endpoints are invoked repeatedly by K8S
+               logger.trace("getHealth");
                return new SuccessTransport(200, "Dashboard is healthy!");
        }
 
        @ApiOperation(value = "Gets the list of application users.", response = DashboardUser.class, responseContainer = "List")
        @GetMapping(USER_METHOD)
+       @Secured({ DashboardConstants.ROLE_ADMIN })
        public DashboardUser[] getUsers() {
                logger.debug("getUsers");
                return users;