Add request capability filters to search API functions

1 files changed, 8 insertions, 0 deletions

diff --git a/searchlib/src/vespa/searchlib/engine/proto_rpc_adapter.cpp b/searchlib/src/vespa/searchlib/engine/proto_rpc_adapter.cpp
index 47fce192020..bc97e57d0b3 100644
--- a/searchlib/src/vespa/searchlib/engine/proto_rpc_adapter.cpp
+++ b/searchlib/src/vespa/searchlib/engine/proto_rpc_adapter.cpp
@@ -4,6 +4,7 @@
 #include "searchapi.h"
 #include "docsumapi.h"
 #include "monitorapi.h"
+#include <vespa/fnet/frt/require_capabilities.h>
 #include <vespa/fnet/frt/rpcrequest.h>
 #include <vespa/fnet/frt/supervisor.h>
 #include <vespa/vespalib/util/compressor.h>
@@ -193,6 +194,10 @@ void describe_bix_param_return(FRT_ReflectionBuilder &rb) {
     rb.ReturnDesc("reply", "possibly compressed serialized reply");
 }
 
+std::unique_ptr<FRT_RequireCapabilities> make_search_api_capability_filter() {
+    return FRT_RequireCapabilities::of(vespalib::net::tls::Capability::content_search_api());
+}
+
 }
 
 ProtoRpcAdapter::ProtoRpcAdapter(SearchServer &search_server,
@@ -210,16 +215,19 @@ ProtoRpcAdapter::ProtoRpcAdapter(SearchServer &search_server,
     rb.DefineMethod("vespa.searchprotocol.search", "bix", "bix",
                     FRT_METHOD(ProtoRpcAdapter::rpc_search), this);
     rb.MethodDesc("perform a search against this back-end");
+    rb.RequestAccessFilter(make_search_api_capability_filter());
     describe_bix_param_return(rb);
     //-------------------------------------------------------------------------
     rb.DefineMethod("vespa.searchprotocol.getDocsums", "bix", "bix",
                     FRT_METHOD(ProtoRpcAdapter::rpc_getDocsums), this);
     rb.MethodDesc("fetch document summaries from this back-end");
+    rb.RequestAccessFilter(make_search_api_capability_filter());
     describe_bix_param_return(rb);
     //-------------------------------------------------------------------------
     rb.DefineMethod("vespa.searchprotocol.ping", "bix", "bix",
                     FRT_METHOD(ProtoRpcAdapter::rpc_ping), this);
     rb.MethodDesc("ping this back-end");
+    rb.RequestAccessFilter(make_search_api_capability_filter());
     describe_bix_param_return(rb);
     //-------------------------------------------------------------------------
 }