add ui to give user api access

src/main/java/com/faendir/acra/service/UserService.java

@@ -69,7 +69,7 @@ public class UserService implements Serializable {
     }
 
     @Transactional
-    @PreAuthorize("hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
+    @PreAuthorize("T(com.faendir.acra.security.SecurityUtils).hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
     public void createUser(@NonNull String username, @NonNull String password) {
         if (new JPAQuery<>(entityManager).from(USER).where(USER.username.eq(username)).fetchFirst() != null) {
             throw new IllegalArgumentException("Username already exists");
@@ -77,6 +77,7 @@ public class UserService implements Serializable {
         entityManager.persist(new User(username, passwordEncoder.encode(password), Collections.singleton(User.Role.USER)));
     }
 
+    @PreAuthorize("T(com.faendir.acra.security.SecurityUtils).hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
     public PlainTextUser createReporterUser() {
         String username;
         do {
@@ -91,6 +92,7 @@ public class UserService implements Serializable {
     }
 
     @Transactional
+    @PreAuthorize("authentication.name == #user.username")
     public boolean changePassword(@NonNull User user, @NonNull String oldPassword, @NonNull String newPassword) {
         if (checkPassword(user, oldPassword)) {
             user.setPassword(passwordEncoder.encode(newPassword));
@@ -101,7 +103,7 @@ public class UserService implements Serializable {
     }
 
     @Transactional
-    @PreAuthorize("hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
+    @PreAuthorize("T(com.faendir.acra.security.SecurityUtils).hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
     public void setAdmin(@NonNull User user, boolean admin) {
         if (admin) {
             user.getRoles().add(User.Role.ADMIN);
@@ -112,7 +114,18 @@ public class UserService implements Serializable {
     }
 
     @Transactional
-    @PreAuthorize("hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
+    @PreAuthorize("T(com.faendir.acra.security.SecurityUtils).hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
+    public void setApiAccess(@NonNull User user, boolean access) {
+        if (access) {
+            user.getRoles().add(User.Role.API);
+        } else {
+            user.getRoles().remove(User.Role.API);
+        }
+        entityManager.merge(user);
+    }
+
+    @Transactional
+    @PreAuthorize("T(com.faendir.acra.security.SecurityUtils).hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
     public void setPermission(@NonNull User user, @NonNull App app, @NonNull Permission.Level level) {
         Optional<Permission> permission = user.getPermissions().stream().filter(p -> p.getApp().equals(app)).findAny();
         if (permission.isPresent()) {
@@ -127,9 +140,10 @@ public class UserService implements Serializable {
     private User getDefaultUser() {
         return new User(acraConfiguration.getUser().getName(),
                 passwordEncoder.encode(acraConfiguration.getUser().getPassword()),
-                Arrays.asList(User.Role.USER, User.Role.ADMIN, User.Role.API));
+                Arrays.asList(User.Role.USER, User.Role.ADMIN));
     }
 
+    @PreAuthorize("T(com.faendir.acra.security.SecurityUtils).hasRole(T(com.faendir.acra.model.User$Role).ADMIN)")
     public QueryDslDataProvider<User> getUserProvider() {
         return new QueryDslDataProvider<>(new JPAQuery<>(entityManager).from(USER).where(USER.roles.any().eq(User.Role.USER)).select(USER));
     }

src/main/java/com/faendir/acra/ui/view/user/UserManagerView.java

@@ -81,6 +81,10 @@ public class UserManagerView extends BaseView {
             userService.setAdmin(user, e.getValue());
             userGrid.getDataProvider().refreshAll();
         }), new ComponentRenderer(), Messages.ADMIN);
+        userGrid.addColumn(user -> new MyCheckBox(user.getRoles().contains(User.Role.API), !user.getUsername().equals(SecurityUtils.getUsername()), e -> {
+            userService.setApiAccess(user, e.getValue());
+            userGrid.getDataProvider().refreshAll();
+        }), new ComponentRenderer(), Messages.API);
         for (App app : dataService.findAllApps()) {
             userGrid.addColumn(user -> {
                 Permission.Level permission = SecurityUtils.getPermission(app, user);

src/main/resources/i18n/com/faendir/acra/messages_de.properties

@@ -129,3 +129,4 @@ footer=Acrarium wird entwickelt von <a href=https://github.com/F43nd1r>F43nd1r</
 blank=
 login=Login
 oneArg={0}
+api=API-Zugriff

src/main/resources/i18n/com/faendir/acra/messages_en.properties

@@ -129,3 +129,4 @@ footer=Acrarium is developed by <a href=https://github.com/F43nd1r>F43nd1r</a>.
 blank=
 login=Login
 oneArg={0}
+api=API Access