/system/loggers is not protected

blossom-project / blossom

Blossom is a Java framework based on Spring-Boot which enables you to realize your projects quickly and smoothly. It comes with several modules and tools made to ease and speed up your development process.

http://blossom-project.com

Apache License 2.0

21 stars 21 forks source link

/system/loggers is not protected #201

Closed jpinta closed 5 years ago

jpinta commented 5 years ago

LoggerManagerController is the only controller (in the system section) not to have a @PreAuthorize above the class definition and so it's free to everyone if they just write the url.

RLejolivet commented 5 years ago

Fixed in #203

Note: you still had to have a Blossom account, so it's not entirely "free to everyone" 😄