Using roles with spring boot actuator -
i'm trying configure "health" actuator endpoint provide details if authenticated user has admin role.
management.security.role: admin management.security.enabled: true endpoints: health: id: health sensitive: true enabled: true time-to-live: 1000
the behaviour i'm seeing details provided regardless of whether authenticated user has admin role or not, long it's authenticated.
this seems in line healthmvcendpoint implementation checks principal not null , not anonymous.
can please provide clarifications on how i'm supposed use roles actuator? (i want restrict access sensitive details not entire endpoint).
- spring boot version: 1.2.4.release
- spring framework: 4.1.6.release
thank you.
Comments
Post a Comment