Jhipster：隐藏非管理员的实体

Question

Greetings java hipsters!

I just generated a jhipster project and created some entities. I'd like to hide some entities by restricting them to only the admin user. How do I achieve this ?

Thanks!

Answer 1

First read Spring Security doc then look at your project source code that was generated by JHipster: it's full of such examples, pay attention to:

• SecurityConfiguration.java
• @Secured(AuthoritiesConstants.ADMIN) in UserResource.java

Then for the angular part, you can add a requirement for admin role in a state's definition like in src/main/webapp/app/admin/configuration/configuration.state.js (search for authorities: ['ROLE_ADMIN'] ). So for a bank-account entity, main state would be defined in src/main/webapp/app/entities/bank-account/bank-account.state.js .

This is for JHipster 3.x

Answer 2

I just describe how i blocked new entity("folder") on a bit more fresh version (JHipster 4.7.0):

to block access to endpoint I added new line in a file: src/main/java/package path/config/SecurityConfiguration.java :

.antMatchers("/api/profile-info").permitAll()
.antMatchers("/api/folders").hasAuthority(AuthoritiesConstants.ADMIN) //new line
.antMatchers("/api/**").authenticated()

change src/main/webapp/app/entities/folder/folder.route.ts :

 data: {
    authorities: ['ROLE_USER'], // old 
    authorities: ['ROLE_ADMIN'],// new
    pageTitle: 'jmediaApp.folder.home.title'
 },

and to hide item from navbar you need to add *jhiHasAnyAuthority="'ROLE_ADMIN'" in <li> tag in /src/main/webapp/app/layouts/navbar/navbar.component.html :

<li *jhiHasAnyAuthority="'ROLE_ADMIN'">