@@ -90,7 +88,6 @@ public interface CustomAclService {
* @param id AclObjectIdentity id
* @return
*/
@PostAuthorize("returnObject==null or hasRole('ADMINISTRATOR') or hasPermission(#returnObject.objectIdIdentity, #returnObject.aclClass.aclClass, 'read')")
AclObjectIdentitygetObjectIdentity(longid);
/**
...
...
@@ -100,7 +97,6 @@ public interface CustomAclService {
* @param className the clazz
* @return the object identity
*/
@PreAuthorize("returnObject==null or hasRole('ADMINISTRATOR') or hasPermission(#id, #className, 'ADMINISTRATION')")
@@ -257,6 +258,7 @@ public class CustomAclServiceImpl implements CustomAclService {
*/
@Override
@Transactional(readOnly=true)
@PostAuthorize("returnObject==null or hasRole('ADMINISTRATOR') or hasPermission(#returnObject.objectIdIdentity, #returnObject.aclClass.aclClass, 'READ')")