From 00ceb6ba8ce85cf995a2c1e888b06ba5c7b99d10 Mon Sep 17 00:00:00 2001
From: Kumar Gauraw <er.krgauraw@gmail.com>
Date: Mon, 25 Apr 2022 11:33:07 +0530
Subject: [PATCH] Issue #SB-29666 fix: updated code to restrict props
---
.../src/main/scala/org/sunbird/managers/AssessmentManager.scala | 2 ++
1 file changed, 2 insertions(+)
diff --git a/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala b/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala
index fc3d99331..407d2d534 100644
--- a/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala
+++ b/assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala
@@ -12,6 +12,7 @@ import org.sunbird.graph.nodes.DataNode
import org.sunbird.graph.utils.NodeUtil
import org.sunbird.telemetry.logger.TelemetryManager
import org.sunbird.telemetry.util.LogTelemetryEventUtil
+import org.sunbird.utils.RequestUtil
import scala.concurrent.{ExecutionContext, Future}
import scala.collection.JavaConversions._
@@ -27,6 +28,7 @@ object AssessmentManager {
val visibility: String = request.getRequest.getOrDefault("visibility", "").asInstanceOf[String]
if (StringUtils.isNotBlank(visibility) && StringUtils.equalsIgnoreCase(visibility, "Parent"))
throw new ClientException(errCode, "Visibility cannot be Parent!")
+ RequestUtil.restrictProperties(request)
DataNode.create(request).map(node => {
val response = ResponseHandler.OK
response.putAll(Map("identifier" -> node.getIdentifier, "versionKey" -> node.getMetadata.get("versionKey")).asJava)
--
GitLab