Browse Source

Bugfix/permission check of dividends import endpoint (#8282)

* Fix missing permission check

* Update changelog
pull/8286/head
Thomas Kaul 5 days ago
committed by GitHub
parent
commit
2b8b8b405f
No known key found for this signature in database GPG Key ID: B5690EEEBB952194
  1. 1
      CHANGELOG.md
  2. 1
      apps/api/src/app/__snapshots__/app.module.spec.ts.snap
  3. 1
      apps/api/src/app/endpoints/import/import.controller.ts

1
CHANGELOG.md

@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
### Fixed ### Fixed
- Fixed a transaction timeout for presets in the historical market data table of the admin control panel - Fixed a transaction timeout for presets in the historical market data table of the admin control panel
- Added the missing permission check in the `GET api/v1/import/dividends/:dataSource/:symbol` endpoint
## 3.90.0 - 2026-10-21 ## 3.90.0 - 2026-10-21

1
apps/api/src/app/__snapshots__/app.module.spec.ts.snap

@ -548,6 +548,7 @@ exports[`AppModule should keep the security of each route 1`] = `
"TransformDataSourceInResponseInterceptor", "TransformDataSourceInResponseInterceptor",
"TransformDataSourceInRequestInterceptor", "TransformDataSourceInRequestInterceptor",
], ],
"permission": "createActivity",
}, },
"GET /info": { "GET /info": {
"guards": [], "guards": [],

1
apps/api/src/app/endpoints/import/import.controller.ts

@ -81,6 +81,7 @@ export class ImportController {
} }
@Get('dividends/:dataSource/:symbol') @Get('dividends/:dataSource/:symbol')
@HasPermission(permissions.createActivity)
@UseGuards(AuthGuard('jwt'), HasPermissionGuard) @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
@UseInterceptors(TransformDataSourceInRequestInterceptor) @UseInterceptors(TransformDataSourceInRequestInterceptor)
@UseInterceptors(TransformDataSourceInResponseInterceptor) @UseInterceptors(TransformDataSourceInResponseInterceptor)

Loading…
Cancel
Save