Changeset 628 for trunk

Timestamp:

Jul 14, 2010, 1:18:53 PM (14 years ago)

Author:

gav

Message:

Full authorisation review.
Add manager role to BaseController.
Remove inventory manager role from CostCode controller as per ticket #77.
Remove inventory manager role from InventoryGroup controller CUD actions.
Add all manager roles to Address and Contact controllers.
Add production and task manager roles to ProductionReference controller.

Location:

trunk/grails-app/controllers

Files:

• AddressDetailedController.groovy (modified) (3 diffs)
• BaseController.groovy (modified) (1 diff)
• ContactDetailedController.groovy (modified) (3 diffs)
• CostCodeDetailedController.groovy (modified) (1 diff)
• DepartmentDetailedController.groovy (modified) (1 diff)
• DepartmentExtendedAttributeDetailedController.groovy (modified) (1 diff)
• ExtendedAttributeTypeDetailedController.groovy (modified) (1 diff)
• InventoryGroupDetailedController.groovy (modified) (1 diff)
• PersonController.groovy (modified) (1 diff)
• ProductionReferenceDetailedController.groovy (modified) (1 diff)
• UnitOfMeasureDetailedController.groovy (modified) (1 diff)

trunk/grails-app/controllers/AddressDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                    'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager'])
 class AddressDetailedController extends BaseController {
 
     def addressService
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def index = { redirect(action:list,params:params) }
 
@@ -12 +14 @@
     static allowedMethods = [delete:'POST', save:'POST', update:'POST']
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def list = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -18 +21 @@
     }
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def show = {
         def addressInstance = Address.get( params.id )

trunk/grails-app/controllers/BaseController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_AppUser'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
 abstract class BaseController {
 

trunk/grails-app/controllers/ContactDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                    'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager'])
 class ContactDetailedController extends BaseController {
 
     def contactService
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def index = { redirect(action:list,params:params) }
 
@@ -12 +14 @@
     static allowedMethods = [delete:'POST', save:'POST', update:'POST']
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def list = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -18 +21 @@
     }
 
-    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_AppUser'])
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager',
+                        'ROLE_InventoryManager', 'ROLE_AssetManager', 'ROLE_ProductionManager', 'ROLE_AppUser'])
     def show = {
         def contactInstance = Contact.get( params.id )

trunk/grails-app/controllers/CostCodeDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
 class CostCodeDetailedController extends BaseController {
     

trunk/grails-app/controllers/DepartmentDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_Manager','ROLE_AppAdmin'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
 class DepartmentDetailedController extends BaseController {
     

trunk/grails-app/controllers/DepartmentExtendedAttributeDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_Manager','ROLE_AppAdmin'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
 class DepartmentExtendedAttributeDetailedController extends BaseController {
 

trunk/grails-app/controllers/ExtendedAttributeTypeDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_Manager','ROLE_AppAdmin'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
 class ExtendedAttributeTypeDetailedController extends BaseController {
     

trunk/grails-app/controllers/InventoryGroupDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
 class InventoryGroupDetailedController extends BaseController {
 

trunk/grails-app/controllers/PersonController.groovy

@@ -2 +2 @@
 import org.codehaus.groovy.grails.commons.ConfigurationHolder
 
-@Secured(['ROLE_Manager','ROLE_AppAdmin'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
 class PersonController extends BaseAppAdminController {
 

trunk/grails-app/controllers/ProductionReferenceDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager', 'ROLE_ProductionManager'])
 class ProductionReferenceDetailedController extends BaseController {
 

trunk/grails-app/controllers/UnitOfMeasureDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
-@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_TaskManager'])
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager'])
 class UnitOfMeasureDetailedController extends BaseController {