Issue #24: Erste Implementierung eines PermissionEvaluators

Diese erste Implementierung wertet die Zugriffsberechtigung auf den Personenstamm
aus, in dem der Patient oder eines der Formulare zum Patienten gehört.

1 files changed, 7 insertions, 0 deletions

diff --git a/src/main/java/DNPM/config/PluginConfiguration.java b/src/main/java/DNPM/config/PluginConfiguration.java
index 30d8fb3..654d4c4 100644
--- a/src/main/java/DNPM/config/PluginConfiguration.java
+++ b/src/main/java/DNPM/config/PluginConfiguration.java
@@ -1,6 +1,7 @@
 package DNPM.config;
 
 import DNPM.database.SettingsRepository;
+import DNPM.security.PersonPoolBasedPermissionEvaluator;
 import DNPM.services.*;
 import DNPM.services.consent.ConsentManagerServiceFactory;
 import DNPM.services.mtb.DefaultMtbService;
@@ -12,6 +13,7 @@ import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.data.jpa.repository.config.EnableJpaRepositories;
+import org.springframework.security.access.PermissionEvaluator;
 
 import javax.sql.DataSource;
 
@@ -26,6 +28,11 @@ import javax.sql.DataSource;
 public class PluginConfiguration {
 
     @Bean
+    public PermissionEvaluator personBasedPermissionEvaluator(final DataSource dataSource) {
+        return new PersonPoolBasedPermissionEvaluator(dataSource);
+    }
+
+    @Bean
     public FormService formService(final DataSource dataSource) {
         return new DefaultFormService(dataSource);
     }