Revize 853bb665

re #7973 changes of authorization - only admin can view pages assembly_new, assembly_edit and assembly_delete, implemented role name to spring role name converter

src/main/java/vldc/aswi/configuration/AppConfig.java

@@ -84 +84 @@
 		http
 		.authorizeRequests()
 			.mvcMatchers("/login").permitAll()
+			.antMatchers("/assembly_new").hasRole("Administrátor")
+			.antMatchers("/assembly_edit").hasRole("Administrátor")
+			.antMatchers("/assembly_delete").hasRole("Administrátor")
 			.regexMatchers(HttpMethod.GET, "^/css/.*", "^/webfonts/.*").permitAll()
 			.anyRequest().authenticated()
 			.and()

src/main/java/vldc/aswi/service/UserManagerImpl.java

@@ -12 +12 @@
 import org.springframework.stereotype.Service;
 import vldc.aswi.dao.RoleRepository;
 import vldc.aswi.dao.UserRepository;
+import vldc.aswi.domain.Role;
 import vldc.aswi.domain.User;
 import vldc.aswi.model.login.WebCredentials;
 
@@ -57 +58 @@
         }
     }
 
+    /**
+     * Converts role name to Spring role name
+     * @param role role which name should be converted
+     * @return string with Spring role
+     */
+    private String toSpringRole(Role role) {
+        return "ROLE_" + role.getName();
+    }
+
     /**
      * Load user details by his username.
      * @param username Username of user.
@@ -72 +82 @@
         }
 
         WebCredentials credentials = new WebCredentials(user.getUsername(), user.getPassword());
-        credentials.addRole(user.getRole().getName());
+
+        credentials.addRole(toSpringRole(user.getRole()));
 
         return credentials;
     }