Specify that '/logs' requires logserver capability

1 files changed, 6 insertions, 1 deletions

diff --git a/container-core/src/main/java/com/yahoo/container/handler/LogHandler.java b/container-core/src/main/java/com/yahoo/container/handler/LogHandler.java
index 72a399744f3..4c0f85d5521 100644
--- a/container-core/src/main/java/com/yahoo/container/handler/LogHandler.java
+++ b/container-core/src/main/java/com/yahoo/container/handler/LogHandler.java
@@ -5,9 +5,12 @@ import com.yahoo.component.annotation.Inject;
 import com.yahoo.container.core.LogHandlerConfig;
 import com.yahoo.container.jdisc.AsyncHttpResponse;
 import com.yahoo.container.jdisc.HttpRequest;
+import com.yahoo.container.jdisc.RequestView;
 import com.yahoo.container.jdisc.ThreadedHttpRequestHandler;
+import com.yahoo.container.jdisc.utils.CapabilityRequiringRequestHandler;
 import com.yahoo.jdisc.handler.CompletionHandler;
 import com.yahoo.jdisc.handler.ContentChannel;
+import com.yahoo.security.tls.Capability;
 
 import java.io.OutputStream;
 import java.time.Instant;
@@ -15,7 +18,7 @@ import java.util.Optional;
 import java.util.concurrent.Executor;
 import java.util.logging.Level;
 
-public class LogHandler extends ThreadedHttpRequestHandler {
+public class LogHandler extends ThreadedHttpRequestHandler implements CapabilityRequiringRequestHandler {
 
     private final LogReader logReader;
     private static final long MB = 1024 * 1024;
@@ -30,6 +33,8 @@ public class LogHandler extends ThreadedHttpRequestHandler {
         this.logReader = logReader;
     }
 
+    @Override public Capability requiredCapability(RequestView __) { return Capability.LOGSERVER_API; }
+
     @Override
     public AsyncHttpResponse handle(HttpRequest request) {
         Instant from = Optional.ofNullable(request.getProperty("from"))