Role names in externalized configuration





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I would like to store role names in application.yml.



But Spring is unable to parse my SpringEl expression. How do I reference property?



@RestController
@RequestMapping(value = {"/rest/administration"})
@PreAuthorize("hasRole(${roles.admin})")
public class RestAdminController {


I am getting error:




Unexpected token. Expected 'identifier' but was 'lcurly({)'











share|improve this question























  • Possible related: stackoverflow.com/questions/31500794/…

    – user482745
    Nov 23 '18 at 14:36


















0















I would like to store role names in application.yml.



But Spring is unable to parse my SpringEl expression. How do I reference property?



@RestController
@RequestMapping(value = {"/rest/administration"})
@PreAuthorize("hasRole(${roles.admin})")
public class RestAdminController {


I am getting error:




Unexpected token. Expected 'identifier' but was 'lcurly({)'











share|improve this question























  • Possible related: stackoverflow.com/questions/31500794/…

    – user482745
    Nov 23 '18 at 14:36














0












0








0








I would like to store role names in application.yml.



But Spring is unable to parse my SpringEl expression. How do I reference property?



@RestController
@RequestMapping(value = {"/rest/administration"})
@PreAuthorize("hasRole(${roles.admin})")
public class RestAdminController {


I am getting error:




Unexpected token. Expected 'identifier' but was 'lcurly({)'











share|improve this question














I would like to store role names in application.yml.



But Spring is unable to parse my SpringEl expression. How do I reference property?



@RestController
@RequestMapping(value = {"/rest/administration"})
@PreAuthorize("hasRole(${roles.admin})")
public class RestAdminController {


I am getting error:




Unexpected token. Expected 'identifier' but was 'lcurly({)'








spring-security spring-el






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 23 '18 at 13:37









user482745user482745

653825




653825













  • Possible related: stackoverflow.com/questions/31500794/…

    – user482745
    Nov 23 '18 at 14:36



















  • Possible related: stackoverflow.com/questions/31500794/…

    – user482745
    Nov 23 '18 at 14:36

















Possible related: stackoverflow.com/questions/31500794/…

– user482745
Nov 23 '18 at 14:36





Possible related: stackoverflow.com/questions/31500794/…

– user482745
Nov 23 '18 at 14:36












1 Answer
1






active

oldest

votes


















1














You may also valid authorities in custom bean implementation @PreAuthorize("@yourBeanName.customMethod(authentication.principal.username)")



And in the bean you can inject your roles as String and just compare Strings






share|improve this answer
























    Your Answer






    StackExchange.ifUsing("editor", function () {
    StackExchange.using("externalEditor", function () {
    StackExchange.using("snippets", function () {
    StackExchange.snippets.init();
    });
    });
    }, "code-snippets");

    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "1"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53447741%2frole-names-in-externalized-configuration%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1














    You may also valid authorities in custom bean implementation @PreAuthorize("@yourBeanName.customMethod(authentication.principal.username)")



    And in the bean you can inject your roles as String and just compare Strings






    share|improve this answer




























      1














      You may also valid authorities in custom bean implementation @PreAuthorize("@yourBeanName.customMethod(authentication.principal.username)")



      And in the bean you can inject your roles as String and just compare Strings






      share|improve this answer


























        1












        1








        1







        You may also valid authorities in custom bean implementation @PreAuthorize("@yourBeanName.customMethod(authentication.principal.username)")



        And in the bean you can inject your roles as String and just compare Strings






        share|improve this answer













        You may also valid authorities in custom bean implementation @PreAuthorize("@yourBeanName.customMethod(authentication.principal.username)")



        And in the bean you can inject your roles as String and just compare Strings







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Nov 23 '18 at 14:19









        Andrew SashaAndrew Sasha

        596315




        596315
































            draft saved

            draft discarded




















































            Thanks for contributing an answer to Stack Overflow!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53447741%2frole-names-in-externalized-configuration%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            這個網誌中的熱門文章

            Academy of Television Arts & Sciences

            L'Équipe

            1995 France bombings