SailingViewerRole now also grants permission for public read of

competitors and boats
This commit is contained in:
Steffen Schäfer
2018-11-21 14:32:30 +01:00
parent 6d17a73692
commit ba83102e1b
@@ -1,6 +1,7 @@
package com.sap.sailing.server.security;
import com.sap.sailing.domain.common.security.SecuredDomainType;
import com.sap.sailing.domain.common.security.SecuredDomainType.CompetitorAndBoatActions;
import com.sap.sse.security.shared.HasPermissions.DefaultActions;
import com.sap.sse.security.shared.RolePrototype;
import com.sap.sse.security.shared.WildcardPermission;
@@ -18,7 +19,8 @@ public class SailingViewerRole extends RolePrototype {
super("sailing_viewer", "c42948df-517b-45cb-9fa9-d1e79f18e115",
WildcardPermission.builder().withTypes(SecuredDomainType.EVENT, SecuredDomainType.LEADERBOARD_GROUP,
SecuredDomainType.LEADERBOARD, SecuredDomainType.REGATTA, SecuredDomainType.TRACKED_RACE)
.withActions(DefaultActions.READ).build());
.withActions(DefaultActions.READ).build(), WildcardPermission.builder().withTypes(SecuredDomainType.COMPETITOR, SecuredDomainType.BOAT)
.withActions(CompetitorAndBoatActions.READ_PUBLIC).build());
}
public static SailingViewerRole getInstance() {