From 9fdcd6a4291656a05cd96a885a1e59b0fe7501cb Mon Sep 17 00:00:00 2001
From: Bohdan Smetaniuk <bsmetanyuk@gmail.com>
Date: Tue, 7 Jul 2020 13:47:10 +0300
Subject: [PATCH] check permissions

---
 .../org/thingsboard/server/controller/EdgeEventController.java  | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/application/src/main/java/org/thingsboard/server/controller/EdgeEventController.java b/application/src/main/java/org/thingsboard/server/controller/EdgeEventController.java
index 8558c194b2..4d689eb5e9 100644
--- a/application/src/main/java/org/thingsboard/server/controller/EdgeEventController.java
+++ b/application/src/main/java/org/thingsboard/server/controller/EdgeEventController.java
@@ -32,6 +32,7 @@ import org.thingsboard.server.common.data.page.TimePageData;
 import org.thingsboard.server.common.data.page.TimePageLink;
 import org.thingsboard.server.dao.edge.EdgeEventService;
 import org.thingsboard.server.queue.util.TbCoreComponent;
+import org.thingsboard.server.service.security.permission.Operation;
 
 @Slf4j
 @RestController
@@ -58,6 +59,7 @@ public class EdgeEventController extends BaseController {
         try {
             TenantId tenantId = getCurrentUser().getTenantId();
             EdgeId edgeId = new EdgeId(toUUID(strEdgeId));
+            checkEdgeId(edgeId, Operation.READ);
             TimePageLink pageLink = createPageLink(limit, startTime, endTime, ascOrder, offset);
             return checkNotNull(edgeEventService.findEdgeEvents(tenantId, edgeId, pageLink));
         } catch (Exception e) {