Added ACL for TPS profile mapping.

New ACL has been added to allow only the administrators to access
TPS profile mappings.

Ticket #652

1 files changed, 8 insertions, 0 deletions

diff --git a/base/common/src/com/netscape/certsrv/tps/profile/ProfileMappingResource.java b/base/common/src/com/netscape/certsrv/tps/profile/ProfileMappingResource.java
index 20e360310..04e606b8a 100644
--- a/base/common/src/com/netscape/certsrv/tps/profile/ProfileMappingResource.java
+++ b/base/common/src/com/netscape/certsrv/tps/profile/ProfileMappingResource.java
@@ -31,11 +31,16 @@ import javax.ws.rs.core.Response;
 
 import org.jboss.resteasy.annotations.ClientResponseType;
 
+import com.netscape.certsrv.acls.ACLMapping;
+import com.netscape.certsrv.authentication.AuthMethodMapping;
+
 
 /**
  * @author Endi S. Dewata
  */
 @Path("profile-mappings")
+@AuthMethodMapping("profile-mappings")
+@ACLMapping("profile-mappings.read")
 public interface ProfileMappingResource {
 
     @GET
@@ -53,6 +58,7 @@ public interface ProfileMappingResource {
     @ClientResponseType(entityType=ProfileMappingData.class)
     @Consumes({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON })
     @Produces({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON })
+    @ACLMapping("profile-mappings.add")
     public Response addProfileMapping(ProfileMappingData profileMappingData);
 
     @PUT
@@ -60,6 +66,7 @@ public interface ProfileMappingResource {
     @ClientResponseType(entityType=ProfileMappingData.class)
     @Consumes({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON })
     @Produces({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON })
+    @ACLMapping("profile-mappings.modify")
     public Response updateProfileMapping(
             @PathParam("profileMappingID") String profileMappingID,
             ProfileMappingData profileMappingData);
@@ -67,5 +74,6 @@ public interface ProfileMappingResource {
     @DELETE
     @Path("{profileMappingID}")
     @Produces({ MediaType.APPLICATION_XML, MediaType.APPLICATION_JSON })
+    @ACLMapping("profile-mappings.remove")
     public void removeProfileMapping(@PathParam("profileMappingID") String profileMappingID);
 }