Commit 25471cb1 authored by Noel Alonso's avatar Noel Alonso
Browse files

Añade nuevas reglas de seguridad

parent 45aa1f3c
Loading
Loading
Loading
Loading
+5 −3
Original line number Diff line number Diff line
@@ -47,9 +47,11 @@ public class Oauth2SecurityConfiguration {
			http.authorizeRequests().antMatchers(HttpMethod.DELETE, "/**/settings/**").access(
					"#oauth2.hasScope('write') and hasAnyRole('ROLE_ADMINISTRATOR', 'ROLE_OAG', 'ROLE_COLLABORATOR', 'ROLE_USER')");
			
			http.authorizeRequests().antMatchers(HttpMethod.GET, "/**/settings/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.POST, "/**/settings/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.PUT, "/**/settings/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.POST, "/**/settings/select").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.PUT, "/**/settings/select/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.PUT, "/**/settings/deselect/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.PUT, "/**/settings/clearselection/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.PUT, "/**/settings/clone/**").permitAll();
			http.authorizeRequests().antMatchers(HttpMethod.OPTIONS, "/**/settings/**").permitAll();
			
			http.authorizeRequests().antMatchers(HttpMethod.POST, "/**").access(