@Test(expected = AccessDeniedException.class) @WithMockUser(TEST_USER_NO_READ) @Transactional(propagation = Propagation.REQUIRES_NEW) public void findFileByBioItemIdDenied() { AclTestDao.AclEntry refAclEntry = new AclTestDao.AclEntry(bam2refIdentity, 1, testUserDeniedSid, AclPermission.NO_READ.getMask(), true); refAclEntry.setId(3L); aclTestDao.createAclEntry(refAclEntry); BiologicalDataItem biologicalDataItem = itemSecurityService.findFileByBioItemId(bam2.getBioDataItemId()); Assert.assertNotNull(biologicalDataItem); }
@PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) public BiologicalDataItem findFileByBioItemId(Long id) { return dataItemManager.findFileByBioItemId(id); }
DataItemSecurityService { @PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) public BiologicalDataItem findFileByBioItemId(Long id) { return dataItemManager.findFileByBioItemId(id); } }
DataItemSecurityService { @PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) public BiologicalDataItem findFileByBioItemId(Long id) { return dataItemManager.findFileByBioItemId(id); }  }
DataItemSecurityService { @PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) public BiologicalDataItem findFileByBioItemId(Long id) { return dataItemManager.findFileByBioItemId(id); }  @AclMaskList @PostFilter(ROLE_ADMIN + OR + READ_ON_FILTER_OBJECT + OR + FILTER_OBJECT_IS_REFERENCE) List<BiologicalDataItem> findFilesByName(String name, boolean strict); @PostAuthorize("isAllowed(returnObject, 'WRITE')") BiologicalDataItem deleteFileByBioItemId(Long id); @PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) BiologicalDataItem findFileByBioItemId(Long id); }
DataItemSecurityService { @PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) public BiologicalDataItem findFileByBioItemId(Long id) { return dataItemManager.findFileByBioItemId(id); }  @AclMaskList @PostFilter(ROLE_ADMIN + OR + READ_ON_FILTER_OBJECT + OR + FILTER_OBJECT_IS_REFERENCE) List<BiologicalDataItem> findFilesByName(String name, boolean strict); @PostAuthorize("isAllowed(returnObject, 'WRITE')") BiologicalDataItem deleteFileByBioItemId(Long id); @PostAuthorize("isAllowed(returnObject, 'READ')" + OR + RETURN_OBJECT_IS_REFERENCE) BiologicalDataItem findFileByBioItemId(Long id);  }