Changeset 298 for trunk/grails-app/controllers/InventoryItemDetailedController.groovy

Timestamp:

Jan 25, 2010, 2:14:48 PM (15 years ago)

Author:

gav

Message:

Set base authorisations on all controllers.

File:

• trunk/grails-app/controllers/InventoryItemDetailedController.groovy (modified) (6 diffs)

trunk/grails-app/controllers/InventoryItemDetailedController.groovy

@@ -1 +1 @@
 import org.codehaus.groovy.grails.plugins.springsecurity.Secured
 
+@Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager'])
 class InventoryItemDetailedController extends BaseController {
 
@@ -7 +8 @@
     def inventoryMovementService
 
-    def index = { redirect(action:search, params:params) }
-
     // the delete, save and update actions only accept POST requests
     static allowedMethods = [delete:'POST', save:'POST', update:'POST', useInventoryItem:'POST']
 
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager', 'ROLE_InventoryUser'])
+    def index = { redirect(action:search, params:params) }
+
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager', 'ROLE_InventoryUser'])
     def list = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -17 +20 @@
     }
 
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager', 'ROLE_InventoryUser'])
     def search = {
         params.max = Math.min( params.max ? params.max.toInteger() : 10,  100)
@@ -34 +38 @@
     * Simply assigns a passed in task id to a session variable and redirects to search.
     */
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager', 'ROLE_InventoryUser'])
     def findInventoryItemForMovement = {
         if(!params.task?.id) {
@@ -46 +51 @@
     }
 
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager', 'ROLE_InventoryUser'])
     def show = {
 
@@ -164 +170 @@
     * Handles the use inventory item form submit in the show view.
     */
+    @Secured(['ROLE_AppAdmin', 'ROLE_Manager', 'ROLE_InventoryManager', 'ROLE_InventoryUser'])
     def useInventoryItem = {