get the permissions right for the proposal store

orppst · Nov 4, 2024 · cfca2bb · cfca2bb
1 parent 5bd134c
commit cfca2bb
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 5 deletions.
diff --git a/src/main/java/org/orph2020/pst/AppLifecycleBean.java b/src/main/java/org/orph2020/pst/AppLifecycleBean.java
@@ -46,10 +46,10 @@ public class AppLifecycleBean {
     @Transactional
     void onStart(@Observes StartupEvent ev) {
         LOGGER.info("The application is starting...");
-        LOGGER.info("initializing Database");
+
         Long i = em.createQuery("select count(o) from Observatory o", Long.class).getSingleResult();
         if(i.intValue() == 0) {
-
+            LOGGER.info("initializing Database");
            // add the example proposals.
             FullExample fullExample = new FullExample();
             List<ProposalCycle> cycles = fullExample.getManagementModel().getContent(ProposalCycle.class);
@@ -61,10 +61,11 @@ void onStart(@Observes StartupEvent ev) {
             }
             fullExample.saveTodB(em);
 
-            ObservingProposal pr = fullExample.getProposalModel().getContent(ObservingProposal.class).get(0);
+
             //here we create document store directories that would be normally created
             // in the implementation of API call "createProposal"
-            // FIXME not sure if justifications are copied too...
+            // FIXME
+            for(ObservingProposal pr: fullExample.getProposalModel().getContent(ObservingProposal.class))
             try {
                 Files.createDirectories(Paths.get(
                         documentStoreRoot,
@@ -87,6 +88,7 @@ void onStart(@Observes StartupEvent ev) {
                         "technical"
                 ));
             } catch (IOException e) {
+                LOGGER.error(e);
                 throw new RuntimeException(e);
             }
         }

diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
@@ -47,7 +47,9 @@ keycloak.admin-password=admin
 quarkus.kubernetes.mounts.pst-document-store.path=/documentStore
 quarkus.kubernetes.pvc-volumes.pst-document-store.claim-name=pst-document-store
 %prod.supporting-documents.store-root=/documentStore/
-
+quarkus.kubernetes.security-context.run-as-user=185
+quarkus.kubernetes.security-context.run-as-group=185
+quarkus.kubernetes.security-context.fs-group=185
 
 #Maximum size of an individual request, i.e. max size of a supporting document
 quarkus.http.limits.max-body-size=100M