From ef42a0cf7643589d9a7fb99f3bfc723d3cf6faaa Mon Sep 17 00:00:00 2001 From: Axel Uhl Date: Mon, 19 May 2014 15:48:15 +0200 Subject: [PATCH] expose only public events by default in the /events REST service. Queries for specific IDs will be satisfied regardless the publicness --- .../sap/sailing/server/gateway/jaxrs/api/EventsResource.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java b/java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java index c50a79f4863..d03ef42be9f 100644 --- a/java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java +++ b/java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java @@ -34,7 +34,9 @@ public class EventsResource extends AbstractSailingServerResource { JsonSerializer eventSerializer = new EventJsonSerializer(new VenueJsonSerializer(new CourseAreaJsonSerializer())); JSONArray result = new JSONArray(); for (EventBase event : getService().getAllEvents()) { - result.add(eventSerializer.serialize(event)); + if (event.isPublic()) { + result.add(eventSerializer.serialize(event)); + } } String json = result.toJSONString(); return Response.ok(json, MediaType.APPLICATION_JSON).build();