From c9d045119633cd5cd2b4b71cc3a19a325804af74 Mon Sep 17 00:00:00 2001 From: Edmundo Alvarez Date: Thu, 22 Jan 2015 16:25:46 +0100 Subject: [PATCH] Review user permissions on streams Fixes Graylog2/graylog2-web-interface#1058 --- .../org/graylog2/rest/resources/streams/StreamResource.java | 4 ---- 1 file changed, 4 deletions(-) diff --git a/graylog2-server/src/main/java/org/graylog2/rest/resources/streams/StreamResource.java b/graylog2-server/src/main/java/org/graylog2/rest/resources/streams/StreamResource.java index 7438034ac24f..0923d8821d7a 100644 --- a/graylog2-server/src/main/java/org/graylog2/rest/resources/streams/StreamResource.java +++ b/graylog2-server/src/main/java/org/graylog2/rest/resources/streams/StreamResource.java @@ -106,8 +106,6 @@ public StreamResource(StreamService streamService, @Consumes(MediaType.APPLICATION_JSON) @Produces(MediaType.APPLICATION_JSON) public Response create(@ApiParam(name = "JSON body", required = true) final CreateStreamRequest cr) throws ValidationException { - checkPermission(RestPermissions.STREAMS_CREATE); - // Create stream. final Stream stream = streamService.create(cr, getCurrentUser().getName()); stream.setDisabled(true); @@ -181,7 +179,6 @@ public Stream get(@ApiParam(name = "streamId", required = true) @Timed @Path("/{streamId}") @ApiOperation(value = "Update a stream") - @RequiresPermissions(RestPermissions.STREAMS_EDIT) @Consumes(MediaType.APPLICATION_JSON) @Produces(MediaType.APPLICATION_JSON) @ApiResponses(value = { @@ -284,7 +281,6 @@ public TestMatchResponse testMatch(@ApiParam(name = "streamId", required = true) @Path("/{streamId}/clone") @Timed @ApiOperation(value = "Clone a stream") - @RequiresPermissions(RestPermissions.STREAMS_CREATE) @ApiResponses(value = { @ApiResponse(code = 404, message = "Stream not found."), @ApiResponse(code = 400, message = "Invalid or missing Stream id.")