From 07b24a4d1dcf600f48ce59626c09c2fd3c644d88 Mon Sep 17 00:00:00 2001 From: Endi Sukma Dewata Date: Wed, 10 Oct 2012 04:38:05 -0500 Subject: Added ACLInterceptor. Previously ACL checking was done in PKIRealm by matching the URL. This code has been replaced by ACLInterceptor which will intercept RESTEasy method invocations. This allows more precise mapping of REST methods to ACL entries in acl.ldif. Ticket #287 --- base/common/src/com/netscape/certsrv/group/GroupResource.java | 3 +++ 1 file changed, 3 insertions(+) (limited to 'base/common/src/com/netscape/certsrv/group/GroupResource.java') diff --git a/base/common/src/com/netscape/certsrv/group/GroupResource.java b/base/common/src/com/netscape/certsrv/group/GroupResource.java index e0110e6a8..17728dd13 100644 --- a/base/common/src/com/netscape/certsrv/group/GroupResource.java +++ b/base/common/src/com/netscape/certsrv/group/GroupResource.java @@ -31,10 +31,13 @@ import javax.ws.rs.core.Response; import org.jboss.resteasy.annotations.ClientResponseType; +import com.netscape.certsrv.acls.ACLMapping; + /** * @author Endi S. Dewata */ @Path("admin/groups") +@ACLMapping("admin.groups") public interface GroupResource { @GET -- cgit