steleks-university-project
/
steleks_backend
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Allow user role management for admins

master
esensar 2018-01-17 22:40:15 +01:00
parent c2f56bc23b
commit c5553591d9
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
users/src/main/java/ba/steleks/security/SecurityConfig.java
View File

@ -46,6 +46,10 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
http.csrf().disable().authorizeRequests() http.csrf().disable().authorizeRequests()
.antMatchers("/accesstoken", "/accesstoken/**", "/").permitAll() .antMatchers("/accesstoken", "/accesstoken/**", "/").permitAll()
.antMatchers(HttpMethod.POST, "/users").permitAll() .antMatchers(HttpMethod.POST, "/users").permitAll()
.antMatchers(HttpMethod.GET, "/users/**/userRoles").hasRole("ADMIN")
.antMatchers(HttpMethod.POST, "/users/**/userRoles").hasRole("ADMIN")
.antMatchers(HttpMethod.PUT, "/users/**/userRoles").hasRole("ADMIN")
.antMatchers(HttpMethod.DELETE, "/users/**/userRoles/*").hasRole("ADMIN")
.anyRequest().authenticated() .anyRequest().authenticated()
.and() .and()
.addFilterBefore(new AuthenticationFilter(tokenStore, usersJpaRepository), CustomUrlUsernamePasswordAuthenticationFilter.class); .addFilterBefore(new AuthenticationFilter(tokenStore, usersJpaRepository), CustomUrlUsernamePasswordAuthenticationFilter.class);