diff --git a/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java b/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java index 18ff1dbb21bd9dd88e7a0ed2ecdc266af7973c1a..2b8271f2d281c68dbfe57164b9d2f335268fd628 100644 --- a/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java +++ b/DLCM-Admin/src/main/java/ch/dlcm/controller/admin/OrganizationalUnitController.java @@ -57,6 +57,7 @@ import ch.unige.solidify.SolidifyConstants; import ch.unige.solidify.rest.ActionName; import ch.unige.solidify.rest.RestCollection; import ch.unige.solidify.security.AdminPermissions; +import ch.unige.solidify.security.EveryonePermissions; import ch.unige.solidify.security.NoOnePermissions; import ch.unige.solidify.security.UserPermissions; import ch.unige.solidify.util.StringTool; @@ -201,7 +202,7 @@ public class OrganizationalUnitController extends DLCMResourceWithLogoController return super.uploadLogo(id, file); } - @UserPermissions + @EveryonePermissions @GetMapping(SolidifyConstants.URL_ID_PLUS_SEP + DLCMActionName.DOWNLOAD_LOGO) @ResponseBody @Override diff --git a/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java b/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java index b28433ba9cd677bd41ca7bb33ef5d66ee56e2b1b..27156043bc55e968e8ad37845f74172c324d00ec 100644 --- a/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java +++ b/DLCM-Model/src/main/java/ch/dlcm/DLCMConstants.java @@ -71,6 +71,7 @@ public class DLCMConstants { "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.PUBLIC_METADATA + "/**", "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.ORG_UNIT + "/**", "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.PUBLIC_METADATA + "/search", + "/**/" + ModuleName.ACCESS + SolidifyConstants.URL_SEP + ResourceName.ORG_UNIT + "/*/" + DLCMActionName.DOWNLOAD_LOGO, "/**/" + UrlPath.ACCESS_AIP + "/**/" + ActionName.DOWNLOAD_TOKEN, "/**/" + UrlPath.ACCESS_DIP + "/**/" + ActionName.DOWNLOAD_TOKEN, "/**/" + UrlPath.ACCESS_ORDER + "/**/" + ActionName.DOWNLOAD_TOKEN,