From 0fb05315ea09ae3f4f745cb35a63934999e973e5 Mon Sep 17 00:00:00 2001 From: Keith Woodlock Date: Mon, 28 May 2012 22:15:38 +0100 Subject: [PATCH] add authorization to role and user services. --- .../platform/user/service/AppUserWritePlatformService.java | 4 ++++ .../platform/user/service/RoleWritePlatformService.java | 3 +++ 2 files changed, 7 insertions(+) diff --git a/mifosng-provider/src/main/java/org/mifosng/platform/user/service/AppUserWritePlatformService.java b/mifosng-provider/src/main/java/org/mifosng/platform/user/service/AppUserWritePlatformService.java index 39106edc8..bc9b71209 100644 --- a/mifosng-provider/src/main/java/org/mifosng/platform/user/service/AppUserWritePlatformService.java +++ b/mifosng-provider/src/main/java/org/mifosng/platform/user/service/AppUserWritePlatformService.java @@ -1,12 +1,16 @@ package org.mifosng.platform.user.service; import org.mifosng.data.command.UserCommand; +import org.springframework.security.access.prepost.PreAuthorize; public interface AppUserWritePlatformService { + @PreAuthorize(value = "hasRole('USER_ADMINISTRATION_SUPER_USER_ROLE')") Long createUser(final UserCommand command); + @PreAuthorize(value = "hasRole('USER_ADMINISTRATION_SUPER_USER_ROLE')") Long updateUser(final UserCommand command); + @PreAuthorize(value = "hasRole('USER_ADMINISTRATION_SUPER_USER_ROLE')") void deleteUser(final Long userId); } \ No newline at end of file diff --git a/mifosng-provider/src/main/java/org/mifosng/platform/user/service/RoleWritePlatformService.java b/mifosng-provider/src/main/java/org/mifosng/platform/user/service/RoleWritePlatformService.java index f203b50cd..6d62f3dc8 100644 --- a/mifosng-provider/src/main/java/org/mifosng/platform/user/service/RoleWritePlatformService.java +++ b/mifosng-provider/src/main/java/org/mifosng/platform/user/service/RoleWritePlatformService.java @@ -1,10 +1,13 @@ package org.mifosng.platform.user.service; import org.mifosng.data.command.RoleCommand; +import org.springframework.security.access.prepost.PreAuthorize; public interface RoleWritePlatformService { + @PreAuthorize(value = "hasRole('USER_ADMINISTRATION_SUPER_USER_ROLE')") Long createRole(RoleCommand command); + @PreAuthorize(value = "hasRole('USER_ADMINISTRATION_SUPER_USER_ROLE')") Long updateRole(RoleCommand command); } \ No newline at end of file