From 287805e7a8e86ad6a60d46c6cd6f34e396346d36 Mon Sep 17 00:00:00 2001 From: Jon Marius Venstad Date: Wed, 25 Mar 2020 09:13:32 +0100 Subject: Cast only AthenzTenants to AthenzTenant --- .../yahoo/vespa/hosted/controller/restapi/filter/AthenzRoleFilter.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/AthenzRoleFilter.java') diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/AthenzRoleFilter.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/AthenzRoleFilter.java index afe8d156d00..5f51b8f4e43 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/AthenzRoleFilter.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/filter/AthenzRoleFilter.java @@ -107,7 +107,8 @@ public class AthenzRoleFilter extends JsonSecurityRequestFilterBase { if (identity.getDomain().equals(SCREWDRIVER_DOMAIN) && application.isPresent() && tenant.isPresent()) futures.add(executor.submit(() -> { - if (hasDeployerAccess(identity, ((AthenzTenant) tenant.get()).domain(), application.get())) + if ( tenant.get().type() == Tenant.Type.athenz + && hasDeployerAccess(identity, ((AthenzTenant) tenant.get()).domain(), application.get())) roleMemberships.add(Role.buildService(tenant.get().name(), application.get())); })); -- cgit v1.2.3