Mercurial > lada > lada-server
diff src/main/java/de/intevation/lada/rest/KommentarMService.java @ 833:fa922101a462
Refactored Authorization.
* Introduced "authorizer"
* Attribute and datatype depended authorization
| author | Raimund Renkert <raimund.renkert@intevation.de> |
|---|---|
| date | Fri, 08 Jan 2016 12:05:26 +0100 |
| parents | 5bdd1631a451 |
| children | 2fe625c91ab3 |
line wrap: on
line diff
--- a/src/main/java/de/intevation/lada/rest/KommentarMService.java Fri Dec 18 18:01:00 2015 +0100 +++ b/src/main/java/de/intevation/lada/rest/KommentarMService.java Fri Jan 08 12:05:26 2016 +0100 @@ -118,10 +118,8 @@ LMessung.class, id, "land"); - if (!authorization.isAuthorized(authorization.getInfo(request), messung)) { - if (!authorization.isAuthorized(id, LMessung.class)) { - return new Response(false, 699, null); - } + if (!authorization.isAuthorized(request, messung, RequestMethod.GET, LMessung.class)) { + return new Response(false, 699, null); } QueryBuilder<LKommentarM> builder = @@ -159,10 +157,8 @@ LMessung.class, kommentar.getMessungsId(), "land"); - if (!authorization.isAuthorized(authorization.getInfo(request), messung)) { - if (!authorization.isAuthorized(messung.getId(), LMessung.class)) { - return new Response(false, 699, null); - } + if (!authorization.isAuthorized(request, messung, RequestMethod.GET, LMessung.class)) { + return new Response(false, 699, null); } return authorization.filter(