Merge pull request #278 from bsinno/bugfix/unauthorized_upload

Fixing unauthorized upload. Closes #263
eclipse-vorto · Jun 17, 2016 · df03134 · df03134
2 parents 48bc3d8 + 75abe94
commit df03134
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/repo/repo-ui/src/main/java/org/eclipse/vorto/repository/VortoRepository.java b/server/repo/repo-ui/src/main/java/org/eclipse/vorto/repository/VortoRepository.java
@@ -115,6 +115,7 @@ protected void configure(HttpSecurity http) throws Exception {
 					.antMatchers(HttpMethod.GET, "/rest/**").permitAll()
 					.antMatchers("/user/**").permitAll()
 					.antMatchers(HttpMethod.PUT, "/rest/**").permitAll()
+					.antMatchers(HttpMethod.POST, "/rest/**").authenticated()
 					.antMatchers(HttpMethod.DELETE, "/rest/**").authenticated()
 					.and()
 					.addFilterAfter(new AngularCsrfHeaderFilter(), CsrfFilter.class).csrf()