Update security config

Patlenlix · Apr 8, 2022 · 9ceed23 · 9ceed23
1 parent ab1bd74
commit 9ceed23
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/src/main/java/se/iths/crimedatabase/security/SecurityConfig.java b/src/main/java/se/iths/crimedatabase/security/SecurityConfig.java
@@ -18,11 +18,14 @@ protected void configure(HttpSecurity http) throws Exception {
         http
                 .csrf().disable()
                 .authorizeRequests()
-                .antMatchers("/criminals").hasRole("ADMIN")
-                .antMatchers("/victims").hasRole("ADMIN")
-                .antMatchers("/users").hasRole("ADMIN")
+                .antMatchers("/").authenticated()
+                .antMatchers("/addresses").authenticated()
+                .antMatchers("/categories").authenticated()
+                .antMatchers("/crimes").authenticated()
+                .antMatchers("/criminals").authenticated()
+                .antMatchers("/victims").authenticated()
                 .antMatchers("/images/**").permitAll()
-                .anyRequest().authenticated()
+                .anyRequest().hasRole("ADMIN")
                 .and()
                 .formLogin()
                 .loginPage("/login").permitAll()