iSharkFly-Docs/java-tutorials
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

minor fix

Browse Source
This commit is contained in:
DOHA 2016-07-30 13:47:31 +02:00
parent ffcd83697a
commit c9d60e614f
2 changed files with 3 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
spring-security-custom-permission/src/main/java/org/baeldung/security/CustomPermissionEvaluator.java
View File

@ -10,17 +10,10 @@ public class CustomPermissionEvaluator implements PermissionEvaluator {
@Override @Override
public boolean hasPermission(Authentication auth, Object targetDomainObject, Object permission) { public boolean hasPermission(Authentication auth, Object targetDomainObject, Object permission) {
System.out.println(auth);
if ((auth == null) || (targetDomainObject == null) || !(permission instanceof String)) { if ((auth == null) || (targetDomainObject == null) || !(permission instanceof String)) {
return false; return false;
} }
String targetType = ""; final String targetType = targetDomainObject.getClass().getSimpleName().toUpperCase();
if (targetDomainObject instanceof String) {
targetType = targetDomainObject.toString().toUpperCase();
} else {
targetType = targetDomainObject.getClass().getSimpleName().toUpperCase();
System.out.println(targetType);
}
return hasPrivilege(auth, targetType, permission.toString().toUpperCase()); return hasPrivilege(auth, targetType, permission.toString().toUpperCase());
} }

3
spring-security-custom-permission/src/main/java/org/baeldung/web/MainController.java
View File

@ -5,6 +5,7 @@ import org.baeldung.persistence.model.Foo;
import org.baeldung.persistence.model.Organization; import org.baeldung.persistence.model.Organization;
import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.HttpStatus; import org.springframework.http.HttpStatus;
import org.springframework.security.access.prepost.PostAuthorize;
import org.springframework.security.access.prepost.PreAuthorize; import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.stereotype.Controller; import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.PathVariable; import org.springframework.web.bind.annotation.PathVariable;
@ -21,7 +22,7 @@ public class MainController {
@Autowired @Autowired
private OrganizationRepository organizationRepository; private OrganizationRepository organizationRepository;
@PreAuthorize("hasPermission('Foo', 'read')") @PostAuthorize("hasPermission(returnObject, 'read')")
@RequestMapping(method = RequestMethod.GET, value = "/foos/{id}") @RequestMapping(method = RequestMethod.GET, value = "/foos/{id}")
@ResponseBody @ResponseBody
public Foo findById(@PathVariable final long id) { public Foo findById(@PathVariable final long id) {