From 943593f6752f6e778958c6d535d39c58b6579a5c Mon Sep 17 00:00:00 2001
From: Timm Fitschen <t.fitschen@indiscale.com>
Date: Fri, 10 Jul 2020 00:07:01 +0200
Subject: [PATCH] FIX: scripting purpose
---
src/main/java/caosdb/server/resource/ScriptingResource.java | 2 +-
src/main/java/caosdb/server/scripting/ScriptingPermissions.java | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/main/java/caosdb/server/resource/ScriptingResource.java b/src/main/java/caosdb/server/resource/ScriptingResource.java
index 4159d7a6..cb652b86 100644
--- a/src/main/java/caosdb/server/resource/ScriptingResource.java
+++ b/src/main/java/caosdb/server/resource/ScriptingResource.java
@@ -213,7 +213,7 @@ public class ScriptingResource extends AbstractCaosDBServerResource {
* the call is not configured to be called by everyone, a SessionToken is returned instead.
*/
public Object generateAuthToken(String call) {
- String purpose = ScriptingPermissions.PERMISSION_EXECUTION(call);
+ String purpose = "SCRIPTING:EXECUTE:" + call;
Object authtoken = OneTimeAuthenticationToken.generateForPurpose(purpose, getUser());
if (authtoken != null || isAnonymous()) {
return authtoken;
diff --git a/src/main/java/caosdb/server/scripting/ScriptingPermissions.java b/src/main/java/caosdb/server/scripting/ScriptingPermissions.java
index b1417035..9165f133 100644
--- a/src/main/java/caosdb/server/scripting/ScriptingPermissions.java
+++ b/src/main/java/caosdb/server/scripting/ScriptingPermissions.java
@@ -3,7 +3,7 @@ package caosdb.server.scripting;
public class ScriptingPermissions {
public static final String PERMISSION_EXECUTION(final String call) {
- StringBuilder ret = new StringBuilder(10 + call.length());
+ StringBuilder ret = new StringBuilder(18 + call.length());
ret.append("SCRIPTING:EXECUTE:");
ret.append(call.replace("/", ":"));
return ret.toString();
--
GitLab