Skip to content
Commit 0ea4b4e2 authored by Ed Tanous's avatar Ed Tanous Committed by Ed Tanous
Browse files

Fix privileges on default handlers



Regardless of what privileges are allowed on a resource, we should
almost always be pulling from the PrivilegeRegistry for the information.
This corrects the handlers in redfish_v1.hpp.  Namely that
JsonSchemaCollection now pulls from the generated privilege registry
files, and the 404 handler now requires a valid login to hit the route.
This allows 401 to be returned on routes that would 404.  Arguably users
should not be able to see what routes bmcweb implements if they are not
authenticated.  Marking the 404 route as login is largely ceremonial and
for documentation, because there is a separate check for a user being
authenticated.

Tested:
Redfish service validator passes.

Signed-off-by: default avatarEd Tanous <edtanous@google.com>
Change-Id: I4c03b0ae05d9fb7712d6ec3b6f2feaf034ca0750
parent 4e7efda1
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment