Turn on security for addCategory method

borabilgin · Feb 1, 2019 · 87047a6 · 87047a6
1 parent ed8a505
commit 87047a6
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/api/src/main/java/com/demo/imagebrowser/controller/FeedCategoryController.java b/api/src/main/java/com/demo/imagebrowser/controller/FeedCategoryController.java
@@ -5,6 +5,7 @@
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestMethod;
 import org.springframework.web.bind.annotation.RequestParam;
@@ -18,6 +19,7 @@ public class FeedCategoryController {
     private FeedService feedService;
 
     @RequestMapping(method = RequestMethod.PUT)
+    @PreAuthorize("hasAuthority('ADMIN')")
     public ResponseEntity<FeedCategory> addCategory(@RequestParam() String categoryName) {
         FeedCategory category = feedService.addCategory(categoryName);
         return new ResponseEntity<>(category, HttpStatus.OK);