Using Enum in sec:authorize="hasRole(...)" (Spring Boot and Thymeleaf)

Question

I try to replace

<div sec:authorize="hasRole('ADMIN')"></div>

by

<div sec:authorize="hasRole(${T(com.mypackage.Role).ADMIN.getText()})"></div>

but it does not work. Then I tried

<div th:with="role=${T(com.mypackage.Role).ADMIN.getText()}" sec:authorize="hasRole(${role})"></div>

and with preprocessing

<div th:with="role=${T(com.mypackage.Role).ADMIN.getText()}" sec:authorize="hasRole(__${role}__)"></div>

but is still not working.

Try `sec:authorize="hasRole(T(com.mypackage.Role).ADMIN)">` – Chetan Ahirrao Oct 07 '22 at 14:53 — Chetan Ahirrao, Oct 07 '22 at 14:53

score 1 · Answer 1 · answered Oct 07 '22 at 18:15

1

Something like this should work:

<div th:if="${#authorization.expression('hasRole(''' + T(com.mypackage.Role).ADMIN.getText() + ''')')}">
  
</div>

(I don't think the sec: attributess interpret Thymeleaf expressions same as other tags... at least I couldn't find any examples of it.)

answered Oct 07 '22 at 18:15

Metroids

Thanks for your anwser, but I want to keep `sec:authorize`. – Kevin O. Oct 08 '22 at 15:07
For `th:if` you could also use `${#request.isUserInRole(T(com.mypackage.Role).ADMIN)}` – Kevin O. Oct 14 '22 at 13:38

score 1 · Accepted Answer · answered Oct 08 '22 at 15:12

1

<div sec:authorize="hasRole(T(com.mypackage.Role).ADMIN)"></div>

Thanks @ChetanAhirrao

answered Oct 08 '22 at 15:12

Kevin O.

2 Answers2