In this tutorial, you will learn how to add role-based authorization to a Spring Boot application.<\/p>\n
This tutorial would simply take you through all the steps you need to follow. However, you will have two links to the actual location of the steps as well as the source codes.<\/p>\n
There are basically 13 steps to follow:<\/p>\n
Step by step video series of Role-Based Authorization with Spring Security here.<\/a><\/strong><\/p>\n Step 1 – Setup the Security Package<\/strong><\/p>\n Here, you need to create a package that could contain the model, service, repository and controller for roles.<\/p>\n <\/p>\n Step 2 – Create the Role Class<\/strong><\/p>\n The role class would define the structure of a Role. Basically and Id and a description<\/p>\n <\/p>\n Step 3 – Refactor the User Class to Include Roles<\/strong><\/p>\n You need to add roles field to the user class. In this way a User object can also hold the set of roles assigned to that user.<\/p>\n <\/p>\n Step 4 – Setup the Role Repository and Service<\/strong><\/p>\n You will need this communicate with the data store and also extend the functionality of the repository.<\/p>\n <\/p>\n Step 5 – Write the Methods to Assign and Unassign Roles in the Service<\/strong><\/p>\n The assign<\/strong> method takes two parameters (User\u00a0 and Role) and adds the role to the roles collection of the user. The unassign()<\/strong> method takes two parameters as well and performs the opposite.<\/p>\n <\/p>\n Step 6 – Write the Method to get User roles<\/strong><\/p>\n You need to write the method to retrieve the roles of the user. This method would be written in the service. It simply takes a user object and returns the roles property<\/p>\n <\/p>\n Step 7 – Write the Method to get roles User does not have<\/strong><\/p>\n This method to get roles not yet assigned to a user is a bit trick. You will have to extend the UserRepository with an SQL native query to returns exactly this result. Next, you will write the method in the service that uses this method in the repository.<\/p>\n This seven steps are detailed here in Part 1 of Role-Based Authorization<\/a><\/p>\n <\/p>\n Step 8 – Create the UserController and Roles Management Page<\/strong><\/p>\n Then you need to create the RoleController. This would contain method to GET, ADD, EDIT\u00a0 and DELETE a role. Next, create the HTML page for roles management<\/p>\n <\/p>\n Step 9 – Create the UserEdit Page<\/strong><\/p>\n The UserEdit page is the page that allows you to manage the roles assigned to a particular user. Via this page, you would be able to view, assign and unassign roles to a user. This would require some JavaScript (See Complete Application in GitHub<\/a>)<\/p>\n <\/p>\n Step 10 – Write the controller method to serve the UserEdit page<\/strong><\/p>\n The HTML page for Users would have an Edit button to edit the User. This button would launch the UserEdit page. So you need to write the method in the UserController to serve up the UserEdit page.<\/p>\n Then you need to create the UserEdit page. It would have 3 sections:<\/p>\n\n