groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-05-10 15:12:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

Only show version string in health endpoint, when user has permissions

Browse source
This commit is contained in:
Jan Böhmer 2026-05-03 19:43:12 +02:00
parent bd686ed9b3
commit ce267cd69d
1 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

13
src/Controller/UpdateManagerController.php
View file

@ -588,9 +588,16 @@ class UpdateManagerController extends AbstractController
#[Route('/health', name: 'admin_update_manager_health', methods: ['GET'])]
public function healthCheck(): JsonResponse
{
return $this->json([
//Only show version if user is logged in and has permission
$response = [
'status' => 'ok',
'version' => $this->versionManager->getVersion()->toString(),
]);
];
if ($this->isGranted('@system.show_updates')) {
$response['version'] = $this->versionManager->getVersion()->toString();
}
return $this->json($response);
}
}