From 91ae8d4cf12a7f6c0f5778e05a722c9fdf1eea9a Mon Sep 17 00:00:00 2001 From: ScarletRedMan Date: Mon, 25 Mar 2024 11:45:53 +0700 Subject: [PATCH] Secured AccountService --- .../java/ru/dragonestia/picker/service/AccountService.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/server/src/main/java/ru/dragonestia/picker/service/AccountService.java b/server/src/main/java/ru/dragonestia/picker/service/AccountService.java index 4b9ca90..f0b2bec 100644 --- a/server/src/main/java/ru/dragonestia/picker/service/AccountService.java +++ b/server/src/main/java/ru/dragonestia/picker/service/AccountService.java @@ -1,6 +1,7 @@ package ru.dragonestia.picker.service; import org.jetbrains.annotations.NotNull; +import org.springframework.security.access.prepost.PreAuthorize; import org.springframework.security.core.userdetails.UserDetailsService; import ru.dragonestia.picker.model.Account; @@ -8,9 +9,12 @@ import java.util.Collection; public interface AccountService extends UserDetailsService { + @PreAuthorize("hasRole('ADMIN')") @NotNull Account createNewAccount(@NotNull String username, @NotNull String password); + @PreAuthorize("hasRole('ADMIN')") @NotNull Collection allAccounts(); + @PreAuthorize("hasRole('ADMIN')") void removeAccount(@NotNull Account account); }