src/main/resources/META-INF/securityFilterRules.json

   1 {
   2   "pathFilter": {
   3     "deniedPaths": [
   4       {
   5         "path": "/camunda/api/engine/.*",
   6         "methods": "*"
   7       },
   8       {
   9         "path": "/camunda/api/cockpit/.*",
  10         "methods": "*"
  11       },
  12       {
  13         "path": "/camunda/app/tasklist/{engine}/.*",
  14         "methods": "*"
  15       },
  16       {
  17         "path": "/camunda/app/cockpit/{engine}/.*",
  18         "methods": "*"
  19       }
  20     ],
  21     "allowedPaths": [
  22       {
  23         "path": "/camunda/api/engine/engine/",
  24         "methods": "GET"
  25       },
  26       {
  27         "path": "/camunda/api/{app:cockpit}/plugin/{engine}/static/.*",
  28         "methods": "GET"
  29       },
  30       {
  31         "path": "/camunda/api/{app:cockpit}/plugin/{plugin}/{engine}/.*",
  32         "methods": "*",
  33         "authorizer": "org.camunda.bpm.webapp.impl.security.filter.EngineRequestAuthorizer"
  34       },
  35       {
  36         "path": "/camunda/api/engine/engine/{engine}/.*",
  37         "methods": "*",
  38         "authorizer": "org.camunda.bpm.webapp.impl.security.filter.EngineRequestAuthorizer"
  39       },
  40       {
  41         "path": "/camunda/app/{app:cockpit}/{engine}/.*",
  42         "methods": "*",
  43         "authorizer": "org.camunda.bpm.webapp.impl.security.filter.ApplicationRequestAuthorizer"
  44       },
  45       {
  46         "path": "/camunda/app/{app:tasklist}/{engine}/.*",
  47         "methods": "*",
  48         "authorizer": "org.camunda.bpm.webapp.impl.security.filter.ApplicationRequestAuthorizer"
  49       }
  50     ]
  51   }
  52 }