From 89798df2322f32d79360ee3da325d5aeec2e5a50 Mon Sep 17 00:00:00 2001
From: Daniel Gerhardt <code@dgerhardt.net>
Date: Wed, 24 Sep 2014 17:27:41 +0200
Subject: [PATCH] Do not expose username for Answer/InterposedQuestion to API
---
src/main/java/de/thm/arsnova/entities/Answer.java | 6 ++++++
.../java/de/thm/arsnova/entities/InterposedQuestion.java | 6 ++++++
2 files changed, 12 insertions(+)
diff --git a/src/main/java/de/thm/arsnova/entities/Answer.java b/src/main/java/de/thm/arsnova/entities/Answer.java
index d2361ed90..ceb1821d7 100644
--- a/src/main/java/de/thm/arsnova/entities/Answer.java
+++ b/src/main/java/de/thm/arsnova/entities/Answer.java
@@ -1,5 +1,7 @@
package de.thm.arsnova.entities;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+
public class Answer {
private String _id;
@@ -86,6 +88,10 @@ public class Answer {
this.piRound = piRound;
}
+ /* TODO: use JsonViews instead of JsonIgnore when supported by Spring (4.1)
+ * http://wiki.fasterxml.com/JacksonJsonViews
+ * https://jira.spring.io/browse/SPR-7156 */
+ @JsonIgnore
public final String getUser() {
return user;
}
diff --git a/src/main/java/de/thm/arsnova/entities/InterposedQuestion.java b/src/main/java/de/thm/arsnova/entities/InterposedQuestion.java
index c316a2598..a08b136ae 100644
--- a/src/main/java/de/thm/arsnova/entities/InterposedQuestion.java
+++ b/src/main/java/de/thm/arsnova/entities/InterposedQuestion.java
@@ -19,6 +19,8 @@
package de.thm.arsnova.entities;
+import com.fasterxml.jackson.annotation.JsonIgnore;
+
public class InterposedQuestion {
private String _id;
@@ -85,6 +87,10 @@ public class InterposedQuestion {
this.timestamp = timestamp;
}
+ /* TODO: use JsonViews instead of JsonIgnore when supported by Spring (4.1)
+ * http://wiki.fasterxml.com/JacksonJsonViews
+ * https://jira.spring.io/browse/SPR-7156 */
+ @JsonIgnore
public String getCreator() {
return creator;
}
--
GitLab