# HG changeset patch
# User František Kučera <franta-hg@frantovo.cz>
# Date 1270508569 -7200
# Node ID ec671fc8fb9c5e34f762214549d742d125a26509
# Parent  ac4a5fc868ebf7188f3eb04231c346a8b171668b
REST: zabezpečení – PUT, POST, DELETE může dělat jen uživatel s rolí „redaktor“

diff -r ac4a5fc868eb -r ec671fc8fb9c java/nekurak.net-ejb/src/java/cz/frantovo/nekurak/ejb/ClanekEJB.java
--- a/java/nekurak.net-ejb/src/java/cz/frantovo/nekurak/ejb/ClanekEJB.java	Tue Apr 06 00:50:30 2010 +0200
+++ b/java/nekurak.net-ejb/src/java/cz/frantovo/nekurak/ejb/ClanekEJB.java	Tue Apr 06 01:02:49 2010 +0200
@@ -35,7 +35,7 @@
 	clanekDAO.upravClanek(clanek);
     }
 
-    //@RolesAllowed("redaktor")
+    @RolesAllowed("redaktor")
     public void smazClanek(Clanek clanek) {
 	clanekDAO.smazClanek(clanek);
     }
diff -r ac4a5fc868eb -r ec671fc8fb9c java/nekurak.net-rest/web/WEB-INF/sun-web.xml
--- a/java/nekurak.net-rest/web/WEB-INF/sun-web.xml	Tue Apr 06 00:50:30 2010 +0200
+++ b/java/nekurak.net-rest/web/WEB-INF/sun-web.xml	Tue Apr 06 01:02:49 2010 +0200
@@ -8,4 +8,8 @@
 	    <description>Keep a copy of the generated servlet class' java code.</description>
 	</property>
     </jsp-config>
+    <security-role-mapping>
+	<role-name>redaktor</role-name>
+	<group-name>redaktor</group-name>
+    </security-role-mapping>
 </sun-web-app>
diff -r ac4a5fc868eb -r ec671fc8fb9c java/nekurak.net-rest/web/WEB-INF/web.xml
--- a/java/nekurak.net-rest/web/WEB-INF/web.xml	Tue Apr 06 00:50:30 2010 +0200
+++ b/java/nekurak.net-rest/web/WEB-INF/web.xml	Tue Apr 06 01:02:49 2010 +0200
@@ -14,4 +14,25 @@
 	    30
 	</session-timeout>
     </session-config>
+    <!--  <zabezpečení> -->
+    <security-role>
+	<role-name>redaktor</role-name>
+    </security-role>
+    <security-constraint>
+	<web-resource-collection>
+	    <web-resource-name>Nekuřák.net REST API</web-resource-name>
+	    <url-pattern>/*</url-pattern>
+	    <http-method>PUT</http-method>
+	    <http-method>POST</http-method>
+	    <http-method>DELETE</http-method>
+	</web-resource-collection>
+	<auth-constraint>
+	    <role-name>redaktor</role-name>
+	</auth-constraint>
+    </security-constraint>
+    <login-config>
+	<auth-method>BASIC</auth-method>
+	<realm-name>nekurakNET</realm-name>
+    </login-config>
+    <!--  </zabezpečení> -->
 </web-app>