Browse Source

Bugfix/permission check of dividends import endpoint (#8282)

* Fix missing permission check

* Update changelog
pull/8286/head
Thomas Kaul 5 days ago
committed by GitHub
parent
commit
2b8b8b405f
No known key found for this signature in database GPG Key ID: B5690EEEBB952194
  1. 1
      CHANGELOG.md
  2. 1
      apps/api/src/app/__snapshots__/app.module.spec.ts.snap
  3. 1
      apps/api/src/app/endpoints/import/import.controller.ts

1
CHANGELOG.md

@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
### Fixed
- Fixed a transaction timeout for presets in the historical market data table of the admin control panel
- Added the missing permission check in the `GET api/v1/import/dividends/:dataSource/:symbol` endpoint
## 3.90.0 - 2026-10-21

1
apps/api/src/app/__snapshots__/app.module.spec.ts.snap

@ -548,6 +548,7 @@ exports[`AppModule should keep the security of each route 1`] = `
"TransformDataSourceInResponseInterceptor",
"TransformDataSourceInRequestInterceptor",
],
"permission": "createActivity",
},
"GET /info": {
"guards": [],

1
apps/api/src/app/endpoints/import/import.controller.ts

@ -81,6 +81,7 @@ export class ImportController {
}
@Get('dividends/:dataSource/:symbol')
@HasPermission(permissions.createActivity)
@UseGuards(AuthGuard('jwt'), HasPermissionGuard)
@UseInterceptors(TransformDataSourceInRequestInterceptor)
@UseInterceptors(TransformDataSourceInResponseInterceptor)

Loading…
Cancel
Save