hazza/DSpace
1
0
Fork 0
mirror of https://github.com/DSpace/DSpace.git synced 2025-10-17 23:13:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

[CST-5728] LYRASIS [Donated]: DSpace7: Implement signposting pattern in DSpace (REST)

Browse Source
This commit is contained in:
Nikita Krivonosov
2023-06-08 11:49:30 +02:00
committed by user
parent 44b948e71c
commit 39df261411
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
dspace-server-webapp/src/main/java/org/dspace/app/rest/signposting/controller/LinksetRestController.java
View File

@@ -139,6 +139,10 @@ public class LinksetRestController {
} }
} }
// In @PreAuthorize(...) we're using "&&" (and) instead of "||" (or) because if hasPermission() is unable
// to find object of specified type with specified uuid it returns "true".
// For example: if we pass uuid of Bitstream: hasPermission(#uuid, 'ITEM', 'READ') returns "true", because
// it will use ItemService with uuid of bitstream.
@PreAuthorize("hasPermission(#uuid, 'ITEM', 'READ') && hasPermission(#uuid, 'BITSTREAM', 'READ')") @PreAuthorize("hasPermission(#uuid, 'ITEM', 'READ') && hasPermission(#uuid, 'BITSTREAM', 'READ')")
@RequestMapping(value = "/links" + REGEX_REQUESTMAPPING_IDENTIFIER_AS_UUID, method = RequestMethod.GET) @RequestMapping(value = "/links" + REGEX_REQUESTMAPPING_IDENTIFIER_AS_UUID, method = RequestMethod.GET)
public List<TypedLinkRest> getHeader(HttpServletRequest request, @PathVariable UUID uuid) { public List<TypedLinkRest> getHeader(HttpServletRequest request, @PathVariable UUID uuid) {