Commit ab9d19d1 authored by Bruno Nocera Zanette's avatar Bruno Nocera Zanette

Updated rules to fix bugs

Updated rules to fix some bugs.
Signed-off-by: Bruno Nocera Zanette's avatarBruno Nocera Zanette <brunonzanette@gmail.com>
parent 4b3bbbde
......@@ -37,9 +37,17 @@
<intercept-url pattern="^/.*$" method="POST" access="hasAnyRole('Administrador', 'Funcionario')"/>
<!-- PROFESSOR - * -->
<intercept-url pattern="^/professors(/.*)?$"
<intercept-url pattern="^/professors(/[0-9]+|/statement(advisees(concluded)?|/committees|/courses))?$"
access="hasAnyRole('Administrador', 'Funcionario', 'Professor')" />
<intercept-url pattern="^/professors.*\?professor=[0-9]?.*$"
access="hasAnyRole('Administrador', 'Funcionario', 'Professor')
and @permissionProvider.hasPermissionToViewPerson(request.getParameter('professor'))"/>
<!-- INGRESSOS - Show -->
<intercept-url pattern="^/registrations/[0-9]+$"
access="hasAnyRole('Administrador', 'Funcionario', 'Professor', 'Aluno')
and @permissionProvider.hasPermissionToViewPerson('registrations', request.getRequestURI())"/>
<!-- INGRESSOS - Show -->
<intercept-url pattern="^/registrations/studentinfo\?registration=[0-9]+$"
access="hasAnyRole('Administrador', 'Funcionario', 'Professor', 'Aluno')
......@@ -120,7 +128,10 @@
access="hasAnyRole('Administrador', 'Funcionario', 'Professor')" />
<intercept-url pattern="^/sectionposes/sectionsselect\?.*professor=[0-9]+$"
access="hasAnyRole('Administrador', 'Funcionario', 'Professor')
and @permissionProvider.hasPermissionToViewCourse(request.getParameter('professor'))"/>
and @permissionProvider.hasPermissionToViewSectionpos(request.getParameter('professor'))"/>
<intercept-url pattern="^/transcripts/transcriptspersectionlist\?sectionpos=[0-9]+$"
access="hasAnyRole('Administrador', 'Funcionario', 'Professor')
and @permissionProvider.hasPermissionToViewSectionpos(request.getParameter('sectionpos'))"/>
<!-- DISCIPLINA - Listar disciplinas -->
<intercept-url pattern="^/courses$"
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment