mirror of
https://github.com/dromara/hertzbeat.git
synced 2026-09-17 09:40:58 +00:00
[fix] sync sureness.yml in release artifacts with the packaged rules (#4367)
This commit is contained in:
@@ -66,6 +66,10 @@ resourceRole:
|
||||
- /api/collector/**===post===[admin,user]
|
||||
- /api/collector/**===put===[admin,user]
|
||||
- /api/collector/**===delete===[admin]
|
||||
- /api/plugin/**===get===[admin]
|
||||
- /api/plugin/**===post===[admin]
|
||||
- /api/plugin/**===put===[admin]
|
||||
- /api/plugin/**===delete===[admin]
|
||||
# the secret config holds the jwt signing key and the aes key protecting stored
|
||||
# credentials, so it stays admin only and is additionally refused by the controller
|
||||
- /api/config/secret===get===[admin]
|
||||
@@ -117,6 +121,9 @@ resourceRole:
|
||||
- /api/logs/ingest/**===post===[admin,user]
|
||||
- /api/observability/logs===delete===[admin]
|
||||
- /api/observability/**===get===[admin,user,guest]
|
||||
- /api/account/token===get===[admin]
|
||||
- /api/account/token/**===post===[admin]
|
||||
- /api/account/token/**===delete===[admin]
|
||||
# The OpenAPI document is a map of every route, parameter and model, so it is
|
||||
# scoped like any other administrative resource instead of being anonymous
|
||||
- /v3/api-docs/**===get===[admin]
|
||||
@@ -151,6 +158,9 @@ excludedResource:
|
||||
- /passport/**===get
|
||||
- /status/**===get
|
||||
- /log/**===get
|
||||
- /observability/**===get
|
||||
- /metrics/**===get
|
||||
- /trace/**===get
|
||||
- /**/*.html===get
|
||||
- /**/*.js===get
|
||||
- /**/*.css===get
|
||||
|
||||
@@ -66,6 +66,10 @@ resourceRole:
|
||||
- /api/collector/**===post===[admin,user]
|
||||
- /api/collector/**===put===[admin,user]
|
||||
- /api/collector/**===delete===[admin]
|
||||
- /api/plugin/**===get===[admin]
|
||||
- /api/plugin/**===post===[admin]
|
||||
- /api/plugin/**===put===[admin]
|
||||
- /api/plugin/**===delete===[admin]
|
||||
# the secret config holds the jwt signing key and the aes key protecting stored
|
||||
# credentials, so it stays admin only and is additionally refused by the controller
|
||||
- /api/config/secret===get===[admin]
|
||||
@@ -117,6 +121,9 @@ resourceRole:
|
||||
- /api/logs/ingest/**===post===[admin,user]
|
||||
- /api/observability/logs===delete===[admin]
|
||||
- /api/observability/**===get===[admin,user,guest]
|
||||
- /api/account/token===get===[admin]
|
||||
- /api/account/token/**===post===[admin]
|
||||
- /api/account/token/**===delete===[admin]
|
||||
# The OpenAPI document is a map of every route, parameter and model, so it is
|
||||
# scoped like any other administrative resource instead of being anonymous
|
||||
- /v3/api-docs/**===get===[admin]
|
||||
@@ -151,6 +158,9 @@ excludedResource:
|
||||
- /passport/**===get
|
||||
- /status/**===get
|
||||
- /log/**===get
|
||||
- /observability/**===get
|
||||
- /metrics/**===get
|
||||
- /trace/**===get
|
||||
- /**/*.html===get
|
||||
- /**/*.js===get
|
||||
- /**/*.css===get
|
||||
|
||||
@@ -66,6 +66,10 @@ resourceRole:
|
||||
- /api/collector/**===post===[admin,user]
|
||||
- /api/collector/**===put===[admin,user]
|
||||
- /api/collector/**===delete===[admin]
|
||||
- /api/plugin/**===get===[admin]
|
||||
- /api/plugin/**===post===[admin]
|
||||
- /api/plugin/**===put===[admin]
|
||||
- /api/plugin/**===delete===[admin]
|
||||
# the secret config holds the jwt signing key and the aes key protecting stored
|
||||
# credentials, so it stays admin only and is additionally refused by the controller
|
||||
- /api/config/secret===get===[admin]
|
||||
@@ -117,6 +121,9 @@ resourceRole:
|
||||
- /api/logs/ingest/**===post===[admin,user]
|
||||
- /api/observability/logs===delete===[admin]
|
||||
- /api/observability/**===get===[admin,user,guest]
|
||||
- /api/account/token===get===[admin]
|
||||
- /api/account/token/**===post===[admin]
|
||||
- /api/account/token/**===delete===[admin]
|
||||
# The OpenAPI document is a map of every route, parameter and model, so it is
|
||||
# scoped like any other administrative resource instead of being anonymous
|
||||
- /v3/api-docs/**===get===[admin]
|
||||
@@ -151,6 +158,9 @@ excludedResource:
|
||||
- /passport/**===get
|
||||
- /status/**===get
|
||||
- /log/**===get
|
||||
- /observability/**===get
|
||||
- /metrics/**===get
|
||||
- /trace/**===get
|
||||
- /**/*.html===get
|
||||
- /**/*.js===get
|
||||
- /**/*.css===get
|
||||
|
||||
@@ -66,6 +66,10 @@ resourceRole:
|
||||
- /api/collector/**===post===[admin,user]
|
||||
- /api/collector/**===put===[admin,user]
|
||||
- /api/collector/**===delete===[admin]
|
||||
- /api/plugin/**===get===[admin]
|
||||
- /api/plugin/**===post===[admin]
|
||||
- /api/plugin/**===put===[admin]
|
||||
- /api/plugin/**===delete===[admin]
|
||||
# the secret config holds the jwt signing key and the aes key protecting stored
|
||||
# credentials, so it stays admin only and is additionally refused by the controller
|
||||
- /api/config/secret===get===[admin]
|
||||
@@ -117,6 +121,9 @@ resourceRole:
|
||||
- /api/logs/ingest/**===post===[admin,user]
|
||||
- /api/observability/logs===delete===[admin]
|
||||
- /api/observability/**===get===[admin,user,guest]
|
||||
- /api/account/token===get===[admin]
|
||||
- /api/account/token/**===post===[admin]
|
||||
- /api/account/token/**===delete===[admin]
|
||||
# The OpenAPI document is a map of every route, parameter and model, so it is
|
||||
# scoped like any other administrative resource instead of being anonymous
|
||||
- /v3/api-docs/**===get===[admin]
|
||||
|
||||
@@ -66,6 +66,10 @@ resourceRole:
|
||||
- /api/collector/**===post===[admin,user]
|
||||
- /api/collector/**===put===[admin,user]
|
||||
- /api/collector/**===delete===[admin]
|
||||
- /api/plugin/**===get===[admin]
|
||||
- /api/plugin/**===post===[admin]
|
||||
- /api/plugin/**===put===[admin]
|
||||
- /api/plugin/**===delete===[admin]
|
||||
# the secret config holds the jwt signing key and the aes key protecting stored
|
||||
# credentials, so it stays admin only and is additionally refused by the controller
|
||||
- /api/config/secret===get===[admin]
|
||||
@@ -117,6 +121,9 @@ resourceRole:
|
||||
- /api/logs/ingest/**===post===[admin,user]
|
||||
- /api/observability/logs===delete===[admin]
|
||||
- /api/observability/**===get===[admin,user,guest]
|
||||
- /api/account/token===get===[admin]
|
||||
- /api/account/token/**===post===[admin]
|
||||
- /api/account/token/**===delete===[admin]
|
||||
# The OpenAPI document is a map of every route, parameter and model, so it is
|
||||
# scoped like any other administrative resource instead of being anonymous
|
||||
- /v3/api-docs/**===get===[admin]
|
||||
@@ -151,6 +158,9 @@ excludedResource:
|
||||
- /passport/**===get
|
||||
- /status/**===get
|
||||
- /log/**===get
|
||||
- /observability/**===get
|
||||
- /metrics/**===get
|
||||
- /trace/**===get
|
||||
- /**/*.html===get
|
||||
- /**/*.js===get
|
||||
- /**/*.css===get
|
||||
|
||||
@@ -66,6 +66,10 @@ resourceRole:
|
||||
- /api/collector/**===post===[admin,user]
|
||||
- /api/collector/**===put===[admin,user]
|
||||
- /api/collector/**===delete===[admin]
|
||||
- /api/plugin/**===get===[admin]
|
||||
- /api/plugin/**===post===[admin]
|
||||
- /api/plugin/**===put===[admin]
|
||||
- /api/plugin/**===delete===[admin]
|
||||
# the secret config holds the jwt signing key and the aes key protecting stored
|
||||
# credentials, so it stays admin only and is additionally refused by the controller
|
||||
- /api/config/secret===get===[admin]
|
||||
@@ -117,6 +121,9 @@ resourceRole:
|
||||
- /api/logs/ingest/**===post===[admin,user]
|
||||
- /api/observability/logs===delete===[admin]
|
||||
- /api/observability/**===get===[admin,user,guest]
|
||||
- /api/account/token===get===[admin]
|
||||
- /api/account/token/**===post===[admin]
|
||||
- /api/account/token/**===delete===[admin]
|
||||
# The OpenAPI document is a map of every route, parameter and model, so it is
|
||||
# scoped like any other administrative resource instead of being anonymous
|
||||
- /v3/api-docs/**===get===[admin]
|
||||
|
||||
Reference in New Issue
Block a user