jdb/new-life-songs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed missing permissions on mutable Song REST resources.

Browse Source
This commit is contained in:
Jonathan Bernard
2015-03-23 04:10:01 -05:00
parent bc02b45712
commit 207e86de81
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/main/groovy/com/jdbernard/nlsongs/rest/SongsResource.java
View File

@@ -1,6 +1,8 @@
package com.jdbernard.nlsongs.rest; package com.jdbernard.nlsongs.rest;
import java.util.List; import java.util.List;
import javax.annotation.security.RolesAllowed;
import javax.annotation.security.PermitAll;
import javax.ws.rs.DELETE; import javax.ws.rs.DELETE;
import javax.ws.rs.GET; import javax.ws.rs.GET;
import javax.ws.rs.POST; import javax.ws.rs.POST;
@@ -19,11 +21,11 @@ import com.jdbernard.nlsongs.model.Song;
@Consumes({MediaType.APPLICATION_JSON}) @Consumes({MediaType.APPLICATION_JSON})
public class SongsResource { public class SongsResource {
@GET @AllowCors @GET
public List<Song> getSongs() { public List<Song> getSongs() {
return NLSongsContext.songsDB.findAllSongs(); } return NLSongsContext.songsDB.findAllSongs(); }
@POST @POST @RolesAllowed("admin")
public Song postSong(Song song) { public Song postSong(Song song) {
return NLSongsContext.songsDB.create(song); } return NLSongsContext.songsDB.create(song); }
@@ -31,13 +33,13 @@ public class SongsResource {
public Song getSong(@PathParam("songId") int songId) { public Song getSong(@PathParam("songId") int songId) {
return NLSongsContext.songsDB.findSong(songId); } return NLSongsContext.songsDB.findSong(songId); }
@PUT @Path("/{songId}") @PUT @Path("/{songId}") @RolesAllowed("admin")
public Song putSong(@PathParam("songId") int songId, Song song) { public Song putSong(@PathParam("songId") int songId, Song song) {
song.setId(songId); song.setId(songId);
NLSongsContext.songsDB.update(song); NLSongsContext.songsDB.update(song);
return song; } return song; }
@DELETE @Path("/{songId}") @DELETE @Path("/{songId}") @RolesAllowed("admin")
public Song deleteSong(@PathParam("songId") int songId) { public Song deleteSong(@PathParam("songId") int songId) {
Song song = NLSongsContext.songsDB.findSong(songId); Song song = NLSongsContext.songsDB.findSong(songId);