Restrict getRoutingRules and getUIConfiguration APIs to ADMIN

trinodb · Feb 10, 2025 · fd5d210 · fd5d210
1 parent b835337
commit fd5d210
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/gateway-ha/src/main/java/io/trino/gateway/ha/resource/GatewayWebAppResource.java b/gateway-ha/src/main/java/io/trino/gateway/ha/resource/GatewayWebAppResource.java
@@ -440,7 +440,7 @@ public Response readExactMatchSourceSelector()
     }
 
     @GET
-    @RolesAllowed("USER")
+    @RolesAllowed("ADMIN")
     @Produces(MediaType.APPLICATION_JSON)
     @Path("/getRoutingRules")
     public Response getRoutingRules()
@@ -463,7 +463,7 @@ public Response updateRoutingRules(RoutingRule routingRule)
     }
 
     @GET
-    @RolesAllowed("USER")
+    @RolesAllowed("ADMIN")
     @Produces(MediaType.APPLICATION_JSON)
     @Path("/getUIConfiguration")
     public Response getUIConfiguration()