boolean authorized = request.isUserInRole(role);
logger.info("user {} in role {} is {}authorized to {}",
- request.getUserPrincipal().getName(), role, ((authorized) ? "" : "NOT "), request.getMethod());
+ request.getUserPrincipal(), role, ((authorized) ? "" : "NOT "), request.getMethod());
if (!authorized) {
response.setStatus(HttpServletResponse.SC_FORBIDDEN);
@Override
protected String getPermissionType(HttpServletRequest request) {
- return getPermissionTypeRoot() + "." +
- request.getRequestURI().replace('/', '.');
+ return getPermissionTypeRoot() + request.getRequestURI().replace('/', '.');
}
@Override
@Override
protected String getRole(HttpServletRequest request) {
- String expectedPerm = this.getPermissionTypeRoot() + "."
+ String expectedPerm = this.getPermissionTypeRoot()
+ request.getRequestURI().replace('/', '.') + "|"
+ NetworkUtil.getHostname() + "|"
+ request.getMethod().toLowerCase();