rsanchez
2017-04-13 84588a793c9484f9182d253ed83ad11687a1d4f8
securis/src/main/java/net/curisit/securis/services/ApplicationResource.java
....@@ -32,6 +32,7 @@
3232 import net.curisit.securis.DefaultExceptionHandler;
3333 import net.curisit.securis.db.Application;
3434 import net.curisit.securis.db.ApplicationMetadata;
35
+import net.curisit.securis.db.User.Rol;
3536 import net.curisit.securis.ioc.EnsureTransaction;
3637 import net.curisit.securis.security.BasicSecurityContext;
3738 import net.curisit.securis.security.Securable;
....@@ -120,7 +121,7 @@
120121 @Consumes(MediaType.APPLICATION_JSON)
121122 @Produces({ MediaType.APPLICATION_JSON })
122123 @EnsureTransaction
123
- @Securable
124
+ @Securable(roles = Rol.ADMIN)
124125 @RolesAllowed(BasicSecurityContext.ROL_ADMIN)
125126 public Response create(Application app, @HeaderParam(TokenHelper.TOKEN_HEADER_PÀRAM) String token) {
126127 LOG.info("Creating new application");
....@@ -146,7 +147,7 @@
146147 @EnsureTransaction
147148 @Consumes(MediaType.APPLICATION_JSON)
148149 @Produces({ MediaType.APPLICATION_JSON })
149
- @Securable
150
+ @Securable(roles = Rol.ADMIN)
150151 @RolesAllowed(BasicSecurityContext.ROL_ADMIN)
151152 public Response modify(Application app, @PathParam("appid") String appid, @HeaderParam(TokenHelper.TOKEN_HEADER_PÀRAM) String token) {
152153 LOG.info("Modifying application with id: {}", appid);
....@@ -209,7 +210,7 @@
209210 @Path("/{appid}")
210211 @EnsureTransaction
211212 @Produces({ MediaType.APPLICATION_JSON })
212
- @Securable
213
+ @Securable(roles = Rol.ADMIN)
213214 @RolesAllowed(BasicSecurityContext.ROL_ADMIN)
214215 public Response delete(@PathParam("appid") String appid, @Context HttpServletRequest request) {
215216 LOG.info("Deleting app with id: {}", appid);