Revize 9a3723cd

re #37 secured access to default settings (read)

server/src/main/java/org/danekja/ymanager/business/ApiManager.java

@@ -3 +3 @@
 import org.danekja.ymanager.business.auth.anot.CanModifyVacation;
 import org.danekja.ymanager.business.auth.anot.IsEmployer;
 import org.danekja.ymanager.business.auth.anot.IsOwner;
+import org.danekja.ymanager.business.auth.anot.IsSignedIn;
 import org.danekja.ymanager.domain.*;
 import org.danekja.ymanager.dto.DefaultSettings;
 import org.danekja.ymanager.dto.*;
@@ -64 +65 @@
     }
 
     @Override
+    @IsSignedIn
     public DefaultSettings getDefaultSettings() throws RESTFullException {
         try {
             return userRepository.getLastDefaultSettings().orElse(new DefaultSettings());

server/src/main/java/org/danekja/ymanager/business/auth/anot/IsSignedIn.java

@@ +1 @@
+package org.danekja.ymanager.business.auth.anot;
+
+import org.springframework.security.access.prepost.PreAuthorize;
+
+import java.lang.annotation.*;
+
+@Target({ElementType.METHOD, ElementType.TYPE})
+@Retention(RetentionPolicy.RUNTIME)
+@Inherited
+@Documented
+@PreAuthorize("isAuthenticated()")
+public @interface IsSignedIn {
+}

server/src/main/java/org/danekja/ymanager/ws/rest/ApiController.java

@@ -93 +93 @@
     public ResponseEntity settings(
             @RequestParam(value = "lang", required = false) String lang)
     {
-        return handle(Language.getLanguage(lang), () ->
-                manager.getDefaultSettings()
+        return handle(Language.getLanguage(lang), manager::getDefaultSettings
         );
     }