From 2644715044394eee2402077c8faab582e267dda3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ma=C3=ABl=20AUDEON?= <mael.audeon@teamdlab.com>
Date: Fri, 21 Aug 2020 17:05:13 +0200
Subject: [PATCH] [Fix TRTL-206] Fix criterions whitelist in Groups API

---
 .../iam/external/server/service/GroupExternalService.java  | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/api/api-iam/iam-external/src/main/java/fr/gouv/vitamui/iam/external/server/service/GroupExternalService.java b/api/api-iam/iam-external/src/main/java/fr/gouv/vitamui/iam/external/server/service/GroupExternalService.java
index 0167ab5b..4f3a6c76 100644
--- a/api/api-iam/iam-external/src/main/java/fr/gouv/vitamui/iam/external/server/service/GroupExternalService.java
+++ b/api/api-iam/iam-external/src/main/java/fr/gouv/vitamui/iam/external/server/service/GroupExternalService.java
@@ -75,6 +75,11 @@ import lombok.Setter;
 @Service
 public class GroupExternalService extends AbstractResourceClientService<GroupDto, GroupDto> {
 
+    private static final String IDENTIFIER_KEY = "identifier";
+    private static final String NAME_KEY = "name";
+    private static final String ENABLED_KEY = "enabled";
+    private static final String DESCRIPTION_KEY = "description";
+
     private final GroupInternalRestClient groupInternalRestClient;
 
     @Autowired
@@ -128,7 +133,7 @@ public class GroupExternalService extends AbstractResourceClientService<GroupDto
 
     @Override
     public Collection<String> getAllowedKeys() {
-        return Arrays.asList("id", "name", "enabled", "description", LEVEL_KEY, CUSTOMER_ID_KEY);
+        return Arrays.asList(IDENTIFIER_KEY, NAME_KEY, ENABLED_KEY, DESCRIPTION_KEY, LEVEL_KEY, CUSTOMER_ID_KEY);
     }
 
     @Override
-- 
GitLab