Browse Source

Fix missing permission check in dividends import endpoint

pull/8282/head
Thomas Kaul 17 hours ago
parent
commit
88dc318a5c
  1. 1
      apps/api/src/app/__snapshots__/app.module.spec.ts.snap
  2. 1
      apps/api/src/app/endpoints/import/import.controller.ts

1
apps/api/src/app/__snapshots__/app.module.spec.ts.snap

@ -546,6 +546,7 @@ exports[`AppModule should keep the security of each route 1`] = `
"TransformDataSourceInResponseInterceptor", "TransformDataSourceInResponseInterceptor",
"TransformDataSourceInRequestInterceptor", "TransformDataSourceInRequestInterceptor",
], ],
"permission": "createActivity",
}, },
"GET /info": { "GET /info": {
"guards": [], "guards": [],

1
apps/api/src/app/endpoints/import/import.controller.ts

@ -82,6 +82,7 @@ export class ImportController {
@Get('dividends/:dataSource/:symbol') @Get('dividends/:dataSource/:symbol')
@UseGuards(AuthGuard('jwt'), HasPermissionGuard) @UseGuards(AuthGuard('jwt'), HasPermissionGuard)
@HasPermission(permissions.createActivity)
@UseInterceptors(TransformDataSourceInRequestInterceptor) @UseInterceptors(TransformDataSourceInRequestInterceptor)
@UseInterceptors(TransformDataSourceInResponseInterceptor) @UseInterceptors(TransformDataSourceInResponseInterceptor)
public async gatherDividends( public async gatherDividends(

Loading…
Cancel
Save