Fixes #13416: Rudder system api token only have RO access

Normation · Sep 6, 2018 · bbc9165 · bbc9165
1 parent 9b3cfb7
commit bbc9165
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rudder-web/src/main/scala/bootstrap/liftweb/AppConfigAuth.scala b/rudder-web/src/main/scala/bootstrap/liftweb/AppConfigAuth.scala
@@ -123,7 +123,7 @@ class AppConfigAuth extends ApplicationContextAware {
   val logger = ApplicationLogger
 
   // we define the System ApiAcl as one that is all mighty and can manage everything
-  val SYSTEM_API_ACL = ApiAuthorization.allAuthz
+  val SYSTEM_API_ACL = ApiAuthorization.RW
 
   def setApplicationContext(applicationContext: ApplicationContext): Unit = {
     //prepare specific properties for new context