Set cache headers to downloaded files (for anonymous only)

[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / internal / kernel / DataHttp.java

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/kernel/DataHttp.java b/org.argeo.cms/src/org/argeo/cms/internal/kernel/DataHttp.java
index e409b65e155bbf5597d55b24c02313e4eb905179..0b697ba77c6cb0835432e1ac8f074e7a146c1d4e 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/internal/kernel/DataHttp.java
+++ b/org.argeo.cms/src/org/argeo/cms/internal/kernel/DataHttp.java
@@ -33,6 +33,7 @@ import org.apache.jackrabbit.server.remoting.davex.JcrRemotingServlet;
 import org.apache.jackrabbit.webdav.simple.SimpleWebdavServlet;
 import org.argeo.cms.CmsException;
 import org.argeo.cms.auth.AuthConstants;
+import org.argeo.cms.auth.CurrentUser;
 import org.argeo.cms.auth.HttpRequestCallback;
 import org.argeo.cms.auth.HttpRequestCallbackHandler;
 import org.argeo.jcr.ArgeoJcrConstants;
@@ -303,7 +304,8 @@ class DataHttp implements KernelConstants, ArgeoJcrConstants {
                                IOException {
                        try {
                                Subject subject = subjectFromRequest(request);
-                               if (request.getMethod().equals("GET")){
+                               if (CurrentUser.isAnonymous(subject)
+                                               && request.getMethod().equals("GET")) {
                                        response.setHeader("Cache-Control",
                                                        "no-transform, public, max-age=300, s-maxage=900");
                                }