X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=webapp-backend%2Fsrc%2Fmain%2Fjava%2Forg%2Foransc%2Fric%2Fportal%2Fdashboard%2Fcontroller%2FAdminController.java;h=6f2825439b7ffd8786bbb1b0e3f977cfd26ab3e1;hb=3f812ea25d352ec33d07f5ffa4c2aa2a77e8e793;hp=2f1414807e2e68ac58d2276838b5ae61fccc6703;hpb=3340ea073fd56431b2d1231bda17cd98765fd8eb;p=portal%2Fric-dashboard.git

diff --git a/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java b/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java
index 2f141480..6f282543 100644
--- a/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java
+++ b/webapp-backend/src/main/java/org/oransc/ric/portal/dashboard/controller/AdminController.java
@@ -28,8 +28,9 @@ import org.oransc.ric.portal.dashboard.model.SuccessTransport;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.http.MediaType;
+import org.springframework.security.access.annotation.Secured;
+import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RequestMethod;
 import org.springframework.web.bind.annotation.RestController;
 
 import io.swagger.annotations.ApiOperation;
@@ -47,21 +48,26 @@ public class AdminController {
 	public static final String CONTROLLER_PATH = DashboardConstants.ENDPOINT_PREFIX + "/admin";
 	public static final String USER_METHOD = "user";
 	public static final String HEALTH_METHOD = "health";
+	public static final String VERSION_METHOD = DashboardConstants.VERSION_METHOD;
 
 	private final DashboardUser[] users;
 
+	private static final String ACTIVE = "Active";
+	private static final String INACTIVE = "Inactive";
+
 	public AdminController() {
 		// Mock data
 		users = new DashboardUser[] { //
-				new DashboardUser(1, "John", "Doe", "Active"), //
-				new DashboardUser(2, "Alice", "Nolan", "Active"), //
-				new DashboardUser(3, "Pierce", "King", "Inactive"), //
-				new DashboardUser(4, "Paul", "Smith", "Inactive"), //
-				new DashboardUser(5, "Jack", "Reacher", "Active") };
+				new DashboardUser(1, "John", "Doe", ACTIVE), //
+				new DashboardUser(2, "Alice", "Nolan", ACTIVE), //
+				new DashboardUser(3, "Pierce", "King", INACTIVE), //
+				new DashboardUser(4, "Paul", "Smith", INACTIVE), //
+				new DashboardUser(5, "Jack", "Reacher", ACTIVE) };
 	}
 
 	@ApiOperation(value = "Gets the Dashboard MANIFEST.MF property Implementation-Version.", response = SuccessTransport.class)
-	@RequestMapping(value = DashboardConstants.VERSION_METHOD, method = RequestMethod.GET)
+	@GetMapping(VERSION_METHOD)
+	// No role required
 	public SuccessTransport getVersion() {
 		logger.debug("getVersion");
 		return new SuccessTransport(200,
@@ -69,14 +75,16 @@ public class AdminController {
 	}
 
 	@ApiOperation(value = "Checks the health of the application.", response = SuccessTransport.class)
-	@RequestMapping(value = HEALTH_METHOD, method = RequestMethod.GET)
+	@GetMapping(HEALTH_METHOD)
+	// No role required
 	public SuccessTransport getHealth() {
 		logger.debug("getHealth");
 		return new SuccessTransport(200, "Dashboard is healthy!");
 	}
 
 	@ApiOperation(value = "Gets the list of application users.", response = DashboardUser.class, responseContainer = "List")
-	@RequestMapping(value = USER_METHOD, method = RequestMethod.GET)
+	@GetMapping(USER_METHOD)
+	@Secured({ DashboardConstants.ROLE_ADMIN })
 	public DashboardUser[] getUsers() {
 		logger.debug("getUsers");
 		return users;