Examples with USERS_TOKENCREATE org.graylog2.shared.security.RestPermissions.USERS_TOKENCREATE used on opensource projects

Example 1 with USERS_TOKENCREATE

use of org.graylog2.shared.security.RestPermissions.USERS_TOKENCREATE in project graylog2-server by Graylog2.

the class UsersResource method generateNewToken.

@POST
@Path("{userId}/tokens/{name}")
@ApiOperation("Generates a new access token for a user")
@AuditEvent(type = AuditEventTypes.USER_ACCESS_TOKEN_CREATE)
public Token generateNewToken(@ApiParam(name = "userId", required = true) @PathParam("userId") String userId, @ApiParam(name = "name", value = "Descriptive name for this token (e.g. 'cronjob') ", required = true) @PathParam("name") String name, @ApiParam(name = "JSON Body", value = "Placeholder because POST requests should have a body. Set to '{}', the content will be ignored.", defaultValue = "{}") String body) {
    final User user = loadUserById(userId);
    final String username = user.getName();
    if (!isPermitted(USERS_TOKENCREATE, username)) {
        throw new ForbiddenException("Not allowed to create tokens for user " + username);
    }
    final AccessToken accessToken = accessTokenService.create(user.getName(), name);
    return Token.create(accessToken.getId(), accessToken.getName(), accessToken.getToken(), accessToken.getLastAccess());
}