[SELC-4807] Feat: Added @PreAuthorize in searchUser by taxCode API (#437

)
pagopa · May 14, 2024 · 7e5d891 · 7e5d891
1 parent 650ee42
commit 7e5d891
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/web/src/main/java/it/pagopa/selfcare/dashboard/web/controller/UserV2Controller.java b/web/src/main/java/it/pagopa/selfcare/dashboard/web/controller/UserV2Controller.java
@@ -119,6 +119,7 @@ public UserResource getUserById(@ApiParam("${swagger.dashboard.user.model.id}")
                     @Content(mediaType = MediaType.APPLICATION_PROBLEM_JSON_VALUE,
                             schema = @Schema(implementation = Problem.class))
             })
+    @PreAuthorize("hasPermission(#institutionId, 'InstitutionResource', 'ADMIN')")
     public UserResource search(@ApiParam("${swagger.dashboard.user.model.searchUserDto}")
                                @RequestBody
                                @Valid