Changeset 289 for trunk/grails-app/controllers

Timestamp:

Jan 22, 2010, 12:27:04 PM (16 years ago)

Author:

gav

Message:

Set some permissions on Site and Section controllers.
Detail some site views missed in last commit.

Location:

trunk/grails-app/controllers

Files:

• BaseAppAdminController.groovy (modified) (1 diff)
• BaseController.groovy (modified) (1 diff)
• SectionDetailedController.groovy (modified) (3 diffs)
• SiteDetailedController.groovy (modified) (3 diffs)

trunk/grails-app/controllers/BaseAppAdminController.groovy

@@ -3 +3 @@
 @Secured(['ROLE_AppAdmin'])
 abstract class BaseAppAdminController {
-    def whatsit() {
-    }
 
 }

trunk/grails-app/controllers/BaseController.groovy

@@ -3 +3 @@
 @Secured(['ROLE_AppUser', 'ROLE_AppAdmin'])
 abstract class BaseController {
-    def whatsit() {
-    }
 
 }

trunk/grails-app/controllers/SectionDetailedController.groovy

@@ -3 +3 @@
 @Secured(['ROLE_Manager','ROLE_AppAdmin'])
 class SectionDetailedController extends BaseController {
-    
-    def index = { redirect(action:list,params:params) }
 
     // the delete, save and update actions only accept POST requests
     static allowedMethods = [delete:'POST', save:'POST', update:'POST']
 
+    @Secured(['ROLE_AppAdmin','ROLE_Manager','ROLE_AppUser'])
+    def index = { redirect(action:list,params:params) }
+
+    @Secured(['ROLE_AppAdmin','ROLE_Manager','ROLE_AppUser'])
     def list = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -14 +16 @@
     }
 
+    @Secured(['ROLE_AppAdmin','ROLE_Manager','ROLE_AppUser'])
     def show = {
         def sectionInstance = Section.get( params.id )
@@ -24 +27 @@
     }
 
+    @Secured(['ROLE_AppAdmin'])
     def delete = {
         def sectionInstance = Section.get( params.id )

trunk/grails-app/controllers/SiteDetailedController.groovy

@@ -3 +3 @@
 @Secured(['ROLE_Manager','ROLE_AppAdmin'])
 class SiteDetailedController extends BaseController {
-    
-    def index = { redirect(action:list,params:params) }
 
     // the delete, save and update actions only accept POST requests
     static allowedMethods = [delete:'POST', save:'POST', update:'POST']
 
+    @Secured(['ROLE_AppAdmin','ROLE_Manager','ROLE_AppUser'])
+    def index = { redirect(action:list,params:params) }
+
+    @Secured(['ROLE_AppAdmin','ROLE_Manager','ROLE_AppUser'])
     def list = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -14 +16 @@
     }
 
+    @Secured(['ROLE_AppAdmin','ROLE_Manager','ROLE_AppUser'])
     def show = {
         def siteInstance = Site.get( params.id )
@@ -24 +27 @@
     }
 
+    @Secured(['ROLE_AppAdmin'])
     def delete = {
         def siteInstance = Site.get( params.id )