Working version of subject specific auth

RADAR-base · Jun 6, 2024 · 2060025 · 2060025
1 parent 6da78c3
commit 2060025
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 12 deletions.
diff --git a/data-dashboard-backend/dashboard.yml b/data-dashboard-backend/dashboard.yml
@@ -1,14 +1,19 @@
+service:
+  baseUri: http://0.0.0.0:9000/api
+  advertisedBaseUri: http://0.0.0.0:9000/api
+  enableCors: false
+
 auth:
   managementPortal:
-    url: http://localhost:8080/managementportal
-    clientId: data_dashboard_api
-    clientSecret: data_dashboard_api_secret
+    url: http://management-portal:8080/managementportal
+    clientId: radar_data_dashboard_backend
+    clientSecret: XKf2oJUW8zE9IcYdvbJijnHowvq23h8RlVzGTydd
   jwtResourceName: res_DataDashboardAPI
 
 database:
-  url: jdbc:postgresql://localhost:5432/data
-  user: radarbase
-  password: radarbase
+  url: jdbc:postgresql://timescaledb-postgresql-hl/data-dashboard
+  user: postgres
+  password: s_tgh4_6Y3ciMWtgZ8tXVxu8
   dialect: org.hibernate.dialect.PostgreSQLDialect
   liquibase:
     contexts: [prod]

diff --git a/data-dashboard-backend/dev/dashboard.yml b/data-dashboard-backend/dev/dashboard.yml
@@ -11,7 +11,7 @@ auth:
   jwtResourceName: res_DataDashboardAPI
 
 database:
-  url: jdbc:postgresql://127.0.0.1:5432/data
+  url: jdbc:postgresql://127.0.0.1:5432/data-dashboard
   user: radarbase
   password: radarbase
   dialect: org.hibernate.dialect.PostgreSQLDialect

diff --git a/...ard-backend/src/main/java/org/radarbase/datadashboard/api/resource/ObservationResource.kt b/...ard-backend/src/main/java/org/radarbase/datadashboard/api/resource/ObservationResource.kt
@@ -21,11 +21,9 @@ package org.radarbase.datadashboard.api.resource
 import jakarta.annotation.Resource
 import jakarta.ws.rs.Consumes
 import jakarta.ws.rs.GET
-import jakarta.ws.rs.NotFoundException
 import jakarta.ws.rs.Path
 import jakarta.ws.rs.PathParam
 import jakarta.ws.rs.Produces
-import jakarta.ws.rs.container.ContainerRequestContext
 import jakarta.ws.rs.core.Context
 import org.radarbase.auth.authorization.Permission
 import org.radarbase.datadashboard.api.api.ObservationListDto
@@ -41,12 +39,10 @@ import org.slf4j.LoggerFactory
 @Authenticated
 class ObservationResource(
     @Context private val observationService: ObservationService,
-    @Context private val request: ContainerRequestContext,
 ) {
     @GET
     @Path("observations")
-//    @NeedsPermission(Permission.MEASUREMENT_READ, "projectId", "subjectId")
-    @NeedsPermission(Permission.MEASUREMENT_READ)
+    @NeedsPermission(Permission.MEASUREMENT_READ, "projectId", "subjectId")
     fun getObservations(
         @PathParam("projectId") projectId: String,
         @PathParam("subjectId") subjectId: String,