fix: secure getDeclarativeManifestBaseImage with AUTHENTICATED_USER (…

…#13641)
airbytehq · Aug 22, 2024 · c969695 · c969695
1 parent 7589d84
commit c969695
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/...yte-server/src/main/java/io/airbyte/server/apis/ConnectorBuilderProjectApiController.java b/...yte-server/src/main/java/io/airbyte/server/apis/ConnectorBuilderProjectApiController.java
@@ -4,6 +4,7 @@
 
 package io.airbyte.server.apis;
 
+import static io.airbyte.commons.auth.AuthRoleConstants.AUTHENTICATED_USER;
 import static io.airbyte.commons.auth.AuthRoleConstants.ORGANIZATION_EDITOR;
 import static io.airbyte.commons.auth.AuthRoleConstants.ORGANIZATION_READER;
 import static io.airbyte.commons.auth.AuthRoleConstants.WORKSPACE_EDITOR;
@@ -97,7 +98,7 @@ public SourceDefinitionIdBody publishConnectorBuilderProject(@Body final Connect
   @Override
   @Post(uri = "/get_base_image")
   @Status(HttpStatus.OK)
-  @Secured({WORKSPACE_EDITOR, ORGANIZATION_EDITOR})
+  @Secured({AUTHENTICATED_USER})
   public DeclarativeManifestBaseImageRead getDeclarativeManifestBaseImage(@Body final DeclarativeManifestRequestBody requestBody) {
     return ApiHelper.execute(() -> connectorBuilderProjectsHandler.getDeclarativeManifestBaseImage(requestBody));
   }