diff --git a/src/main/java/com/LabWork/app/MangaStore/controller/Creator/CreatorActionMvcController.java b/src/main/java/com/LabWork/app/MangaStore/controller/Creator/CreatorActionMvcController.java index 5fd2313..6f14544 100644 --- a/src/main/java/com/LabWork/app/MangaStore/controller/Creator/CreatorActionMvcController.java +++ b/src/main/java/com/LabWork/app/MangaStore/controller/Creator/CreatorActionMvcController.java @@ -5,8 +5,11 @@ import com.LabWork.app.MangaStore.model.Dto.SupportDto.MangaDto; import com.LabWork.app.MangaStore.service.CreatorService; import com.LabWork.app.MangaStore.service.MangaService; import javax.validation.Valid; + +import com.LabWork.app.MangaStore.user.model.UserRole; import org.slf4j.Logger; import org.slf4j.LoggerFactory; +import org.springframework.security.access.annotation.Secured; import org.springframework.stereotype.Controller; import org.springframework.ui.Model; import org.springframework.validation.BindingResult; @@ -18,6 +21,7 @@ import java.util.Base64; @Controller @RequestMapping("/creatorAction") +@Secured({UserRole.AsString.ADMIN}) public class CreatorActionMvcController { private final CreatorService creatorService; private static final Logger log = LoggerFactory.getLogger(CreatorActionMvcController.class); diff --git a/src/main/java/com/LabWork/app/MangaStore/controller/Reader/ReaderActionMvcController.java b/src/main/java/com/LabWork/app/MangaStore/controller/Reader/ReaderActionMvcController.java index 281e78c..73c52e2 100644 --- a/src/main/java/com/LabWork/app/MangaStore/controller/Reader/ReaderActionMvcController.java +++ b/src/main/java/com/LabWork/app/MangaStore/controller/Reader/ReaderActionMvcController.java @@ -6,8 +6,11 @@ import com.LabWork.app.MangaStore.model.Dto.SupportDto.MangaDto; import com.LabWork.app.MangaStore.service.ReaderService; import com.LabWork.app.MangaStore.service.MangaService; import javax.validation.Valid; + +import com.LabWork.app.MangaStore.user.model.UserRole; import org.slf4j.Logger; import org.slf4j.LoggerFactory; +import org.springframework.security.access.annotation.Secured; import org.springframework.stereotype.Controller; import org.springframework.ui.Model; import org.springframework.validation.BindingResult; @@ -17,6 +20,7 @@ import java.io.IOException; @Controller @RequestMapping("/readerAction") +@Secured({UserRole.AsString.USER}) public class ReaderActionMvcController { private final ReaderService readerService; private static final Logger log = LoggerFactory.getLogger(ReaderActionMvcController.class); diff --git a/src/main/resources/templates/default.html b/src/main/resources/templates/default.html index f7dbe9d..0b9500a 100644 --- a/src/main/resources/templates/default.html +++ b/src/main/resources/templates/default.html @@ -1,7 +1,8 @@ + xmlns:layout="http://www.ultraq.net.nz/thymeleaf/layout" + xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity5"> ReManga @@ -28,9 +29,9 @@