From a8703ca94022dd89cdc57b23717e80319879895b Mon Sep 17 00:00:00 2001
From: Arthur Wambst <arthur.wambst@epita.fr>
Date: Mon, 20 Oct 2025 17:25:37 +0200
Subject: [PATCH] preparations: removed useless endpoint and added security for
 docker endpoints

---
 .../fr/la_banquise/backend/rest/DockerResource.java    | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/main/java/fr/la_banquise/backend/rest/DockerResource.java b/src/main/java/fr/la_banquise/backend/rest/DockerResource.java
index 661c1a3..e01d52a 100644
--- a/src/main/java/fr/la_banquise/backend/rest/DockerResource.java
+++ b/src/main/java/fr/la_banquise/backend/rest/DockerResource.java
@@ -1,6 +1,8 @@
 package fr.la_banquise.backend.rest;
 
 import fr.la_banquise.backend.services.DockerService;
+import io.quarkus.security.jpa.Roles;
+import jakarta.annotation.security.RolesAllowed;
 import jakarta.inject.Inject;
 import jakarta.ws.rs.*;
 import jakarta.ws.rs.core.MediaType;
@@ -14,7 +16,7 @@ public class DockerResource {
 
     @Inject DockerService dockerService;
 
-    @POST
+    /*@POST
     @Path("/nginx")
     public Response launchNginx() {
         try {
@@ -40,9 +42,10 @@ public class DockerResource {
                 .entity(Map.of("error", e.getMessage()))
                 .build();
         }
-    }
+    }*/
 
     @GET
+    @RolesAllowed("ROOT")
     @Path("/all")
     public Response listContainers() {
         try {
@@ -55,6 +58,7 @@ public class DockerResource {
     }
 
     @POST
+    @RolesAllowed("ROOT")
     @Path("/start")
     public Response start(@QueryParam("id") String id) {
         try {
@@ -69,6 +73,7 @@ public class DockerResource {
     }
 
     @POST
+    @RolesAllowed("ROOT")
     @Path("/stop")
     public Response stop(@QueryParam("id") String id) {
         try {
@@ -82,6 +87,7 @@ public class DockerResource {
         }
     }
     @DELETE
+    @RolesAllowed("ROOT")
     @Path("/remove")
     public Response remove(@QueryParam("id") String id) {
         try {