找出这个生成控制器中的授权缺陷。
Java
@RestController
class InvoiceController {
private final InvoiceRepository invoices;
@GetMapping("/accounts/{accountId}/invoices/{invoiceId}")
Invoice invoice(@PathVariable long accountId, @PathVariable long invoiceId) {
return invoices.findById(invoiceId)
.orElseThrow(() -> new ResponseStatusException(HttpStatus.NOT_FOUND));
}
}