retrieveWorkflowRuntimeStatistics is the only WorkflowExecutionsResource endpoint missing @RolesAllowed / @Auth

[mengw15]

What happened?

In WorkflowExecutionsResource (WorkflowExecutionsResource.scala:662-665), retrieveWorkflowRuntimeStatistics (GET /executions/{wid}/stats/{eid}) declares neither @RolesAllowed nor an @Auth sessionUser parameter. Every other endpoint in the class does:

• @GET — /{wid}/latest, /{wid}/interactions/{eid}, /{wid}
• @PUT — /set_execution_bookmarks, /delete_executions
• @POST — /update_execution_name

All six carry @RolesAllowed(Array("REGULAR", "ADMIN")) + @Auth sessionUser. The class has no class-level @RolesAllowed either, so this one handler is inconsistent with the rest. Looks like an oversight when it was added.

Fix: add @RolesAllowed(Array("REGULAR", "ADMIN")) and an @Auth sessionUser: SessionUser parameter to match the sibling endpoints.

How to reproduce?

Compare the annotations on retrieveWorkflowRuntimeStatistics (662-665) against the other handlers in the same class — it is the only one without @RolesAllowed / @Auth.

Version

1.1.0-incubating (Pre-release/Master)

[github-actions]

👋 Thanks for opening this issue, @mengw15!

It looks like the issue description doesn't quite follow our template yet:

• This issue doesn't appear to use one of our templates (Bug, Feature, or Task). Please open it using a template so the required details are captured.

Filling out the template helps reviewers understand and triage your contribution faster. Please edit the description to complete it. This message will disappear automatically once the template is followed.

You can find the template prompts by editing the description, or see CONTRIBUTING.md for the full contribution flow.