Updated rules to fix bugs

Updated rules to fix some bugs.
Signed-off-by: Bruno Nocera Zanette <brunonzanette@gmail.com>

src/main/resources/META-INF/spring/applicationContext-security.xml

@@ -37,9 +37,17 @@
 		<intercept-url pattern="^/.*$" method="POST" access="hasAnyRole('Administrador', 'Funcionario')"/>
 	
 		<!-- PROFESSOR - * -->
-		<intercept-url pattern="^/professors(/.*)?$"
+		<intercept-url pattern="^/professors(/[0-9]+|/statement(advisees(concluded)?|/committees|/courses))?$"
 						access="hasAnyRole('Administrador', 'Funcionario', 'Professor')" />
+		<intercept-url pattern="^/professors.*\?professor=[0-9]?.*$"
+						access="hasAnyRole('Administrador', 'Funcionario', 'Professor')
+								and @permissionProvider.hasPermissionToViewPerson(request.getParameter('professor'))"/>
 						
+		<!-- INGRESSOS - Show -->
+		<intercept-url pattern="^/registrations/[0-9]+$" 
+						access="hasAnyRole('Administrador', 'Funcionario', 'Professor', 'Aluno')
+								and @permissionProvider.hasPermissionToViewPerson('registrations', request.getRequestURI())"/>
+		
 		<!-- INGRESSOS - Show -->
 		<intercept-url pattern="^/registrations/studentinfo\?registration=[0-9]+$" 
 						access="hasAnyRole('Administrador', 'Funcionario', 'Professor', 'Aluno')
@@ -120,7 +128,10 @@
 						access="hasAnyRole('Administrador', 'Funcionario', 'Professor')" />
 		<intercept-url pattern="^/sectionposes/sectionsselect\?.*professor=[0-9]+$"
 						access="hasAnyRole('Administrador', 'Funcionario', 'Professor')
-								and @permissionProvider.hasPermissionToViewCourse(request.getParameter('professor'))"/>
+								and @permissionProvider.hasPermissionToViewSectionpos(request.getParameter('professor'))"/>
+		<intercept-url pattern="^/transcripts/transcriptspersectionlist\?sectionpos=[0-9]+$"
+						access="hasAnyRole('Administrador', 'Funcionario', 'Professor')
+								and @permissionProvider.hasPermissionToViewSectionpos(request.getParameter('sectionpos'))"/>						
         
 		<!-- DISCIPLINA - Listar disciplinas -->
 		<intercept-url pattern="^/courses$"