| .. | .. |
|---|
| 32 | 32 | import net.curisit.securis.DefaultExceptionHandler; |
|---|
| 33 | 33 | import net.curisit.securis.db.Application; |
|---|
| 34 | 34 | import net.curisit.securis.db.ApplicationMetadata; |
|---|
| 35 | +import net.curisit.securis.db.User.Rol; |
|---|
| 35 | 36 | import net.curisit.securis.ioc.EnsureTransaction; |
|---|
| 36 | 37 | import net.curisit.securis.security.BasicSecurityContext; |
|---|
| 37 | 38 | import net.curisit.securis.security.Securable; |
|---|
| .. | .. |
|---|
| 120 | 121 | @Consumes(MediaType.APPLICATION_JSON) |
|---|
| 121 | 122 | @Produces({ MediaType.APPLICATION_JSON }) |
|---|
| 122 | 123 | @EnsureTransaction |
|---|
| 123 | | - @Securable |
|---|
| 124 | + @Securable(roles = Rol.ADMIN) |
|---|
| 124 | 125 | @RolesAllowed(BasicSecurityContext.ROL_ADMIN) |
|---|
| 125 | 126 | public Response create(Application app, @HeaderParam(TokenHelper.TOKEN_HEADER_PÀRAM) String token) { |
|---|
| 126 | 127 | LOG.info("Creating new application"); |
|---|
| .. | .. |
|---|
| 146 | 147 | @EnsureTransaction |
|---|
| 147 | 148 | @Consumes(MediaType.APPLICATION_JSON) |
|---|
| 148 | 149 | @Produces({ MediaType.APPLICATION_JSON }) |
|---|
| 149 | | - @Securable |
|---|
| 150 | + @Securable(roles = Rol.ADMIN) |
|---|
| 150 | 151 | @RolesAllowed(BasicSecurityContext.ROL_ADMIN) |
|---|
| 151 | 152 | public Response modify(Application app, @PathParam("appid") String appid, @HeaderParam(TokenHelper.TOKEN_HEADER_PÀRAM) String token) { |
|---|
| 152 | 153 | LOG.info("Modifying application with id: {}", appid); |
|---|
| .. | .. |
|---|
| 209 | 210 | @Path("/{appid}") |
|---|
| 210 | 211 | @EnsureTransaction |
|---|
| 211 | 212 | @Produces({ MediaType.APPLICATION_JSON }) |
|---|
| 212 | | - @Securable |
|---|
| 213 | + @Securable(roles = Rol.ADMIN) |
|---|
| 213 | 214 | @RolesAllowed(BasicSecurityContext.ROL_ADMIN) |
|---|
| 214 | 215 | public Response delete(@PathParam("appid") String appid, @Context HttpServletRequest request) { |
|---|
| 215 | 216 | LOG.info("Deleting app with id: {}", appid); |
|---|