feat(authorization): Add create restriction to application creation (#…

…618) * add create restriction to application creation * remove TODO
spinnaker · Oct 25, 2019 · c8e96e1 · c8e96e1
1 parent 78a0ffb
commit c8e96e1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...rc/main/groovy/com/netflix/spinnaker/front50/controllers/v2/ApplicationsController.groovy b/...rc/main/groovy/com/netflix/spinnaker/front50/controllers/v2/ApplicationsController.groovy
@@ -94,7 +94,7 @@ public class ApplicationsController {
     return results
   }
 
-  // TODO(ttomsu): Think through application creation permissions.
+  @PreAuthorize("@fiatPermissionEvaluator.canCreate('APPLICATION', app)")
   @ApiOperation(value = "", notes = "Create an application")
   @RequestMapping(method = RequestMethod.POST)
   Application create(@RequestBody final Application app) {