| | |
|---|
| | | .and().authenticationProvider(restAuthenticationProvider) |
|---|
| | | .authorizeRequests() |
|---|
| | | .antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll() |
|---|
| | | .antMatchers("/api/admin/department/list", "/api/admin/video/getList").permitAll() |
|---|
| | | .antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName()) |
|---|
| | | .antMatchers("/api/admin/department/list", "/api/admin/video/getList","/api/admin/user/conversion","/api/admin/examPaperGrade/updates").permitAll() |
|---|
| | | // todo 设置部门管理员可以看的请求 |
|---|
| | | .antMatchers("/api/admin/**").hasAnyRole(RoleEnum.ADMIN.getName(), RoleEnum.DEPT_ADMIN.getName()) |
|---|
| | | .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName()) |
|---|
| | | .anyRequest().permitAll() |
|---|
| | | .and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler) |
|---|
