Project

General

Profile

« Previous | Next » 

Revision c56db927

Added by Katja Luther over 12 years ago

View differences:

cdmlib-services/src/main/resources/eu/etaxonomy/cdm/defaultSecurityContext.xml
34 34
		<security:expression-handler ref="expressionHandler"/>
35 35
	</security:global-method-security>
36 36

  
37
	
37 38
	<bean id="expressionHandler" class="org.springframework.security.access.expression.method.DefaultMethodSecurityExpressionHandler">
38 39
        <property name="permissionEvaluator" ref="cdmPermissionEvaluator"/>
39 40
	</bean>
40
	
41
	 
42
	<bean id="roleVoter" class="org.springframework.security.access.vote.RoleHierarchyVoter">
43
    <constructor-arg ref="roleHierarchy" />
44
    
45
	</bean>
46
	<bean id="roleHierarchy"
47
        class="org.springframework.security.access.hierarchicalroles.RoleHierarchyImpl">
48
    	<property name="hierarchy">
49
            <value>
50
                ALL.ADMIN > ALL.UPDATE
51
                ALL.ADMIN > ALL.CREATE
52
                
53
                TAXONBASE.ADMIN > TAXON.CREATE
54
                TAXONBASE.ADMIN > TAXON.UPDATE
55
                TAXONBASE.ADMIN > TAXON.DELETE
56
                TAXONBASE.ADMIN > TAXON.READ
57
                TAXONBASE.ADMIN > DESCRIPTIONBASE.ADMIN
58
                
59
                DESCRIPTIONBASE.ADMIN > DESCRIPTIONBASE.CREATE
60
                DESCRIPTIONBASE.ADMIN > DESCRIPTIONBASE.UPDATE
61
                DESCRIPTIONBASE.ADMIN > DESCRIPTIONBASE.DELETE
62
                DESCRIPTIONBASE.ADMIN > DESCRIPTIONBASE.READ
63
                DESCRIPTIONBASE.ADMIN > DESCRIPTIONELEMENTBASE.ADMIN
64
                
65
                DESCRIPTIONELEMENTBASE.ADMIN > DESCRIPTIONELEMENTBASE.CREATE
66
                DESCRIPTIONELEMENTBASE.ADMIN > DESCRIPTIONELEMENTBASE.UPDATE
67
                DESCRIPTIONELEMENTBASE.ADMIN > DESCRIPTIONELEMENTBASE.DELETE
68
                DESCRIPTIONELEMENTBASE.ADMIN > DESCRIPTIONELEMENTBASE.READ
69
                
70
                USER.ADMIN > USER.CREATE
71
                USER.ADMIN > USER.UPDATE
72
                USER.ADMIN > USER.READ
73
                USER.ADMIN > USER.DELETE
74
               
75
            </value>
76
        </property>
77

  
78
	</bean>
79
	 
41 80
	
42 81
 	<bean class="eu.etaxonomy.cdm.permission.CdmPermissionEvaluator" id="cdmPermissionEvaluator"/>
43 82
    

Also available in: Unified diff