Removed authorization workaround

This commit is contained in:
Daniel
2021-11-05 12:03:15 +01:00
committed by Daniel Hutzel
parent ac2e4dd6f9
commit 2703e8b999
2 changed files with 6 additions and 13 deletions

View File

@@ -28,14 +28,7 @@ service ReviewsService {
annotate ReviewsService.Reviews with @restrict:[
{ grant:'READ', to:'any' }, // everybody can read reviews
{ grant:'CREATE', to:'authenticated-user' }, // users must login to add reviews
/////////////////////////////////////////////////
//
// Temporarily disabling this due to glitch in CAP Node.js runtime:
// { grant:'UPDATE', to:'authenticated-user', where:'reviewer=$user' },
// -> reenable it when the issue is fixed
{ grant:'UPDATE', to:'authenticated-user' },
//
////////////////////////////////////////////////////
{ grant:'UPDATE', to:'authenticated-user', where:'reviewer=$user' },
{ grant:'DELETE', to:'admin' },
];