stateless + auth

Author: begarco

grails-app/controllers/ovh/garcon/tasko/AnswerMessageController.groovy

@@ -27,7 +27,7 @@ class AnswerMessageController {
         respond message
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
+    @Secured(['ROLE_USER', 'ROLE_ADMIN'])
     @Transactional
     def save(AnswerMessage answerMessage) {
 
@@ -61,7 +61,7 @@ class AnswerMessageController {
         respond answerMessage
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
+    @Secured(['ROLE_USER', 'ROLE_ADMIN'])
     @Transactional
     def update(AnswerMessage answerMessage) {
         if (answerMessage == null) {

grails-app/controllers/ovh/garcon/tasko/ComMessageController.groovy

@@ -30,12 +30,12 @@ class ComMessageController {
         respond message
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
+    @Secured(['ROLE_USER', 'ROLE_ADMIN'])
     def create() {
         respond new ComMessage(params)
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
+    @Secured(['ROLE_USER', 'ROLE_ADMIN'])
     @Transactional
     def save(ComMessage comMessage) {
         if (comMessage == null) {
@@ -73,13 +73,13 @@ class ComMessageController {
         }
     }
 
-    //@Secured(['ROLE_USER','ROLE_ADMIN'])
+    @Secured(['ROLE_USER','ROLE_ADMIN'])
     @Transactional
     def add(){
         ComMessage com = new ComMessage(
                 date: new Date(),
                 content: params.content,
-                user: (User)getAuthenticatedUser(),
+                user: User.findById(params.uId as Integer),
                 parentMessage: MyMessage.get(params.mId as Integer),
                 value: 0,
                 question: Question.get(params.qId as Integer)

grails-app/controllers/ovh/garcon/tasko/MyMessageController.groovy

@@ -30,7 +30,7 @@ class MyMessageController {
         respond message
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
+    @Secured(['ROLE_USER', 'ROLE_ADMIN'])
     @Transactional
     def save(MyMessage myMessage) {
 
@@ -65,6 +65,7 @@ class MyMessageController {
     }
 
     @Transactional
+    @Secured(['ROLE_USER','ROLE_ADMIN'])
     def update(MyMessage myMessage) {
         if (myMessage == null) {
             transactionStatus.setRollbackOnly()
@@ -95,7 +96,7 @@ class MyMessageController {
      * Modify the value of a message for gamification
      * @return
      */
-    //@Secured(['ROLE_USER','ROLE_ADMIN'])
+    @Secured(['ROLE_USER','ROLE_ADMIN'])
     @Transactional
     def vote(){
         MyMessage item = MyMessage.get(params.mId as Integer)

grails-app/controllers/ovh/garcon/tasko/QuestionController.groovy

@@ -37,12 +37,11 @@ class QuestionController {
         respond question
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
     def create() {
-        respond new Question(question: new QuestionMessage())
+        respond new Question(question: new QuestionMessage(), date: new Date())
     }
 
-    //@Secured(['ROLE_USER', 'ROLE_ADMIN'])
+    @Secured(['ROLE_USER', 'ROLE_ADMIN'])
     @Transactional
     def save(Question question) {
 
@@ -63,7 +62,7 @@ class QuestionController {
                 title: question.title
         ).save(flush:true)
 
-        badgatorService.serviceMethod(QUE.getUserId()) // check badges
+        badgatorService.serviceMethod(user.id) // check badges
 
         request.withFormat {
             form multipartForm {

grails-app/init/taskoverflow/BootStrap.groovy

@@ -83,6 +83,7 @@ class BootStrap {
             returnArray['username'] = it.user.username
             returnArray['userimage'] = it.user.profil.image
             returnArray['value'] = it.value
+            returnArray['questionid'] = it.question==null?'':it.question.id
 
             return returnArray
         }
@@ -97,6 +98,7 @@ class BootStrap {
             returnArray['userimage'] = it.user.profil.image
             returnArray['coms'] = it.coms
             returnArray['value'] = it.value
+            returnArray['questionid'] = it.question==null?'':it.question.id
 
             return returnArray
         }
@@ -111,6 +113,7 @@ class BootStrap {
             returnArray['userimage'] = it.user.profil.image
             returnArray['coms'] = it.coms
             returnArray['value'] = it.value
+            returnArray['questionid'] = it.question==null?'':it.question.id
 
             return returnArray
         }