enable spring boot actuator for admin users

1 files changed, 6 insertions, 1 deletions

diff --git a/src/main/java/com/juick/service/security/JuickUserDetailsService.java b/src/main/java/com/juick/service/security/JuickUserDetailsService.java
index a62bdadd..da222539 100644
--- a/src/main/java/com/juick/service/security/JuickUserDetailsService.java
+++ b/src/main/java/com/juick/service/security/JuickUserDetailsService.java
@@ -21,11 +21,14 @@ import com.juick.model.User;
 import com.juick.service.UserService;
 import com.juick.service.security.entities.JuickUser;
 import org.apache.commons.lang3.StringUtils;
+import org.springframework.security.core.GrantedAuthority;
 import org.springframework.security.core.userdetails.UserDetails;
 import org.springframework.security.core.userdetails.UserDetailsService;
 import org.springframework.security.core.userdetails.UsernameNotFoundException;
 import org.springframework.util.Assert;
 
+import java.util.List;
+
 /**
  * Created by aalexeev on 11/28/16.
  */
@@ -46,7 +49,9 @@ public class JuickUserDetailsService implements UserDetailsService {
 
         if (!user.isAnonymous()) {
             user.setAuthHash(userService.getHashByUID(user.getUid()));
-            return new JuickUser(user);
+            List<GrantedAuthority> authorities = userService.isAdminUser(user) ?
+                    JuickUser.ADMIN_AUTHORITY : JuickUser.USER_AUTHORITY;
+            return new JuickUser(user, authorities);
         }
 
         throw new UsernameNotFoundException("The username " + username + " is not found");