From 3f13fedfa443ef912bde770f3b463540e90d32d9 Mon Sep 17 00:00:00 2001 From: Chris Knoll Date: Tue, 13 Oct 2026 17:49:37 -0400 Subject: [PATCH] Allow admin:source to see sources in source list. --- src/main/java/org/ohdsi/webapi/source/SourceService.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/org/ohdsi/webapi/source/SourceService.java b/src/main/java/org/ohdsi/webapi/source/SourceService.java index 8c6d3a6d2..cd4520909 100644 --- a/src/main/java/org/ohdsi/webapi/source/SourceService.java +++ b/src/main/java/org/ohdsi/webapi/source/SourceService.java @@ -145,7 +145,8 @@ protected void doInTransactionWithoutResult(TransactionStatus transactionStatus) @GetMapping(value = "/sources", produces = MediaType.APPLICATION_JSON_VALUE) public ResponseEntity> getSourcesEndpoint() { boolean globalRead = authorizationService.isPermitted("read:source") - || authorizationService.isPermitted("write:source"); + || authorizationService.isPermitted("write:source") + || authorizationService.isPermitted("admin:source"); Collection visible = getSources().stream() .filter(s -> globalRead || authorizationService.hasSourceAccess(s.getSourceKey(), AccessType.READ)) .map(SourceInfo::new)