Commit 2d4cd748 authored by Maxym Borodenko's avatar Maxym Borodenko

PreAuthorize for service method

parent ea5cec8e
...@@ -371,6 +371,7 @@ public class CustomAclServiceImpl implements CustomAclService { ...@@ -371,6 +371,7 @@ public class CustomAclServiceImpl implements CustomAclService {
*/ */
@Override @Override
@Transactional(readOnly = true) @Transactional(readOnly = true)
@PreAuthorize("hasRole('ADMINISTRATOR') or hasPermission(#objectIdentity.objectIdIdentity, #objectIdentity.aclClass.aclClass, 'ADMINISTRATION')")
public List<AclEntry> getAclEntries(final AclObjectIdentity objectIdentity) { public List<AclEntry> getAclEntries(final AclObjectIdentity objectIdentity) {
return aclEntryPersistence.findByObjectIdentity(objectIdentity); return aclEntryPersistence.findByObjectIdentity(objectIdentity);
} }
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment