source: branches/TaskRewrite/src/grails-app/controllers/AuthorityController.groovy @ 66

import org.codehaus.groovy.grails.plugins.springsecurity.Secured

@Secured(['ROLE_ADMIN'])
class AuthorityController {

        // the delete, save and update actions only accept POST requests
        static Map allowedMethods = [delete: 'POST', save: 'POST', update: 'POST']

        def authenticateService

        def index = {
                redirect action: list, params: params
        }

        /**
         * Display the list authority page.
         */
        def list = {
                if (!params.max) {
                        params.max = 10
                }
                [authorityList: Authority.list(params)]
        }

        /**
         * Display the show authority page.
         */
        def show = {
                def authority = Authority.get(params.id)
                if (!authority) {
                        flash.message = "Authority not found with id $params.id"
                        redirect action: list
                        return
                }

                [authority: authority]
        }

        /**
         * Delete an authority.
         */
        def delete = {
                def authority = Authority.get(params.id)
                if (!authority) {
                        flash.message = "Authority not found with id $params.id"
                        redirect action: list
                        return
                }

                authenticateService.deleteRole(authority)

                flash.message = "Authority $params.id deleted."
                redirect action: list
        }

        /**
         * Display the edit authority page.
         */
        def edit = {
                def authority = Authority.get(params.id)
                if (!authority) {
                        flash.message = "Authority not found with id $params.id"
                        redirect action: list
                        return
                }

                [authority: authority]
        }

        /**
         * Authority update action.
         */
        def update = {

                def authority = Authority.get(params.id)
                if (!authority) {
                        flash.message = "Authority not found with id $params.id"
                        redirect action: edit, id: params.id
                        return
                }

                long version = params.version.toLong()
                if (authority.version > version) {
                        authority.errors.rejectValue 'version', 'authority.optimistic.locking.failure',
                                'Another user has updated this Authority while you were editing.'
                        render view: 'edit', model: [authority: authority]
                        return
                }

                if (authenticateService.updateRole(authority, params)) {
                        authenticateService.clearCachedRequestmaps()
                        redirect action: show, id: authority.id
                }
                else {
                        render view: 'edit', model: [authority: authority]
                }
        }

        /**
         * Display the create new authority page.
         */
        def create = {
                [authority: new Authority()]
        }

        /**
         * Save a new authority.
         */
        def save = {

                def authority = new Authority()
                authority.properties = params
                if (authority.save()) {
                        redirect action: show, id: authority.id
                }
                else {
                        render view: 'create', model: [authority: authority]
                }
        }
}