From 55b8601f61a6e5dab495aed35005bd7cbee69592 Mon Sep 17 00:00:00 2001
From: Chris Knoll <cknoll@ohdsi.org>
Date: Wed, 29 Jul 2026 11:29:37 -0400
Subject: [PATCH] Remove permission checks that require global source
 read/write.

---
 src/main/java/org/ohdsi/webapi/source/SourceService.java | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/main/java/org/ohdsi/webapi/source/SourceService.java b/src/main/java/org/ohdsi/webapi/source/SourceService.java
index 15d9c02c5..8c6d3a6d2 100644
--- a/src/main/java/org/ohdsi/webapi/source/SourceService.java
+++ b/src/main/java/org/ohdsi/webapi/source/SourceService.java
@@ -179,7 +179,6 @@ public ResponseEntity<Collection<SourceInfo>> refreshSources() {
      * @return The CDM metadata for the priority vocabulary.
      */
     @GetMapping(value = "/priorityVocabulary", produces = MediaType.APPLICATION_JSON_VALUE)
-    @PreAuthorize("isAnyPermitted(anyOf('read:source','write:source'))")
     public ResponseEntity<SourceInfo> getPriorityVocabularySourceInfoEndpoint() {
         return ResponseEntity.ok(getPriorityVocabularySourceInfo());
     }
@@ -191,7 +190,6 @@ public ResponseEntity<SourceInfo> getPriorityVocabularySourceInfoEndpoint() {
      * @return  Metadata for a single Source that matches the <code>sourceKey</code>.
      */
     @GetMapping(value = "/{key}", produces = MediaType.APPLICATION_JSON_VALUE)
-    @PreAuthorize("isAnyPermitted(anyOf('read:source','write:source'))")
     public ResponseEntity<SourceInfo> getSource(@PathVariable("key") final String sourceKey) {
         return ResponseEntity.ok(sourceRepository.findBySourceKey(sourceKey).getSourceInfo());
     }