employee rights

cypo721 · Jan 14, 2017 · e1eecce · e1eecce
1 parent 0fae9b2
commit e1eecce
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/web/src/main/java/security/SecurityConfig.java b/web/src/main/java/security/SecurityConfig.java
@@ -31,8 +31,9 @@ public AuthenticationProvider authProvider(){
  protected void configure(HttpSecurity http) throws Exception {
  http.authorizeRequests()
  .antMatchers("/", "/home/", "/machine/","/login/", "/accessdenied").permitAll()
- .antMatchers("/rental/list").hasAnyAuthority("ADMIN", "CUSTOMER")
- .antMatchers("/user/**", "/revision/**", "/rental/edit/**", "/rental/new", "/rental/delete").hasAuthority("ADMIN")
+ .antMatchers("/rental/list").hasAnyAuthority("ADMIN", "CUSTOMER", "EMPLOYEE")
+ .antMatchers("/user/delete", "/revision/**", "/rental/edit/**", "/rental/new", "/rental/delete").hasAuthority("ADMIN")
+ .antMatchers("/user/", "/revision/**", "/rental/edit/**", "/rental/new", "/rental/delete").hasAuthority("EMPLOYEE")
  //.anyRequest().authenticated()
  .and()
  .formLogin()