Make ACL expression for storage items' tags update operations less strict - allow for users with `WRITE` access to storage
/*
- * Copyright 2017-2020 EPAM Systems, Inc. (https://www.epam.com/)
+ * Copyright 2017-2022 EPAM Systems, Inc. (https://www.epam.com/)
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -274,7 +274,7 @@ public class DataStorageApiService {
messageHelper.getMessage(MessageConstants.ERROR_INVALID_CREDENTIALS_REQUEST)));
}
- @PreAuthorize(AclExpressions.STORAGE_ID_OWNER)
+ @PreAuthorize(AclExpressions.STORAGE_ID_WRITE)
public Map<String, String> updateDataStorageObjectTags(Long id, String path, Map<String, String> tags,
String version, Boolean rewrite) {
return dataStorageManager.updateDataStorageObjectTags(id, path, tags, version, rewrite);
@@ -290,7 +290,7 @@ public class DataStorageApiService {
return dataStorageManager.loadDataStorageObjectTags(id, path, version);
}
- @PreAuthorize(AclExpressions.STORAGE_ID_OWNER)
+ @PreAuthorize(AclExpressions.STORAGE_ID_WRITE)
public Map<String, String> deleteDataStorageObjectTags(Long id, String path, String version, Set<String> tags) {
return dataStorageManager.deleteDataStorageObjectTags(id, path, version, tags);
}
