Browse Source

Fix missing permission check in dividends import endpoint

pull/8282/head
Thomas Kaul 17 hours ago
parent
commit
88dc318a5c
  1. 1
      apps/api/src/app/__snapshots__/app.module.spec.ts.snap
  2. 1
      apps/api/src/app/endpoints/import/import.controller.ts

1
apps/api/src/app/__snapshots__/app.module.spec.ts.snap

@ -546,6 +546,7 @@ exports[`AppModule should keep the security of each route 1`] = `
"TransformDataSourceInResponseInterceptor",
"TransformDataSourceInRequestInterceptor",
],
"permission": "createActivity",
},
"GET /info": {
"guards": [],

1
apps/api/src/app/endpoints/import/import.controller.ts

@ -82,6 +82,7 @@ export class ImportController {
@Get('dividends/:dataSource/:symbol')
@UseGuards(AuthGuard('jwt'), HasPermissionGuard)
@HasPermission(permissions.createActivity)
@UseInterceptors(TransformDataSourceInRequestInterceptor)
@UseInterceptors(TransformDataSourceInResponseInterceptor)
public async gatherDividends(

Loading…
Cancel
Save