Verified Commit fee79c26 authored by Matthias Neugebauer's avatar Matthias Neugebauer

Merge remote-tracking branch 'upstream/r/8.x' into wwu/8

* upstream/r/8.x:
  Configure POST api/groups access correctly (#2253)
parents d5c25d12 df5a7038
......@@ -218,7 +218,7 @@
<sec:intercept-url pattern="/api/events/*" method="POST" access="ROLE_ADMIN, ROLE_API_EVENTS_EDIT"/>
<sec:intercept-url pattern="/api/events/*/acl/*" method="POST" access="ROLE_ADMIN, ROLE_API_EVENTS_ACL_EDIT"/>
<sec:intercept-url pattern="/api/groups" method="POST" access="ROLE_ADMIN, ROLE_API_GROUPS_CREATE"/>
<sec:intercept-url pattern="/api/groups/*/members/*" method="POST" access="ROLE_ADMIN, ROLE_API_GROUPS_EDIT"/>
<sec:intercept-url pattern="/api/groups/*/members" method="POST" access="ROLE_ADMIN, ROLE_API_GROUPS_EDIT"/>
<sec:intercept-url pattern="/api/clearIndex" method="POST" access="ROLE_ADMIN"/>
<sec:intercept-url pattern="/api/recreateIndex" method="POST" access="ROLE_ADMIN"/>
<sec:intercept-url pattern="/api/recreateIndex/*" method="POST" access="ROLE_ADMIN"/>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment