| | |
|---|
| | | .and().authenticationProvider(restAuthenticationProvider) |
|---|
| | | .authorizeRequests() |
|---|
| | | .antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll() |
|---|
| | | .antMatchers("/api/admin/department/list", "/api/admin/video/getList","/api/admin/user/conversion").permitAll() |
|---|
| | | .antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName()) |
|---|
| | | .antMatchers("/api/admin/department/list", |
|---|
| | | "/api/admin/video/getList", |
|---|
| | | "/api/admin/user/conversion", |
|---|
| | | "/api/admin/examPaperGrade/updates", |
|---|
| | | "/api/admin/question/download/question/import/temp", |
|---|
| | | "/api/admin/question/question/import" |
|---|
| | | ).permitAll() |
|---|
| | | // todo 设置部门管理员可以看的请求 |
|---|
| | | .antMatchers("/api/admin/**").hasAnyRole(RoleEnum.ADMIN.getName(), RoleEnum.DEPT_ADMIN.getName()) |
|---|
| | | .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName()) |
|---|
| | | .anyRequest().permitAll() |
|---|
| | | .and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler) |
|---|
