From df77a2f9d736370b08570b2790f1539e05cc8bd1 Mon Sep 17 00:00:00 2001
From: Jean Pommier <jean.pommier@pi-geosolutions.fr>
Date: Wed, 9 Oct 2024 10:06:15 +0200
Subject: [PATCH] fix: apply PR #390 to docker-master branch

Should also be backported to docker-24.0 branch
---
 gateway/gateway.yaml                 | 4 ++--
 security-proxy/security-mappings.xml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/gateway/gateway.yaml b/gateway/gateway.yaml
index 607a7f94..20e5f8d6 100644
--- a/gateway/gateway.yaml
+++ b/gateway/gateway.yaml
@@ -37,13 +37,13 @@ georchestra:
         access-rules:
         - intercept-url: /datafeeder/**
           anonymous: false
-          allowed-roles: SUPERUSER,DATAFEEDER
+          allowed-roles: SUPERUSER,IMPORT
       import:
         target: ${georchestra.gateway.services.import.target}
         access-rules:
         - intercept-url: /import/**
           anonymous: false
-          allowed-roles: SUPERUSER,DATAFEEDER
+          allowed-roles: SUPERUSER,IMPORT
       console:
         target: ${georchestra.gateway.services.console.target}
         access-rules:
diff --git a/security-proxy/security-mappings.xml b/security-proxy/security-mappings.xml
index 72274bef..5a944e53 100644
--- a/security-proxy/security-mappings.xml
+++ b/security-proxy/security-mappings.xml
@@ -29,7 +29,7 @@
   <intercept-url pattern="/console/internal/.*" access="ROLE_SUPERUSER" />
   <intercept-url pattern="/testPage" access="IS_AUTHENTICATED_FULLY" />
   <intercept-url pattern=".*/ogcproxy/.*" access="ROLE_NO_ONE" />
-  <intercept-url pattern="/datafeeder/.*" access="IS_AUTHENTICATED_FULLY" />
-  <intercept-url pattern="/import/.*" access="IS_AUTHENTICATED_FULLY" />
+  <intercept-url pattern="/datafeeder/.*" access="ROLE_SUPERUSER,ROLE_IMPORT" />
+  <intercept-url pattern="/import/.*" access="ROLE_SUPERUSER,ROLE_IMPORT" />
   <intercept-url pattern=".*" access="IS_AUTHENTICATED_ANONYMOUSLY,ROLE_USER,ROLE_GN_EDITOR,ROLE_GN_REVIEWER,ROLE_GN_ADMIN,ROLE_ADMINISTRATOR,ROLE_SUPERUSER,ROLE_ORGADMIN" />
 </http>