CODEWITHSUNDEEP
grailsspring-securityauthorizationrole
laxmi
laxmi

Reputation: 865

How to get current user role with spring security plugin?

I am using the spring-security-core plugin in my grails app. I need to know the current user's role in a controller action. How can I retrieve that?

Upvotes: 23

Views: 23612

Answers (6)

Erik Kaju
Erik Kaju

Reputation: 3173

SecurityContextHolder knows that:

SecurityContextHolder.getContext().getAuthentication().getAuthorities()

Upvotes: 0

amit
amit

Reputation: 356

To get the user 

    def springSecurityService
    def principal = springSecurityService.principal
    String username = principal.username

Upvotes: 0

Pudpuduk
Pudpuduk

Reputation: 1619

You can also use getAuthenticatedUser() by itself. This method is automatically injected in every controller, and thus only available from controllers. You will have to use one of the other methods if you want to access the current logged in user from anywhere else.

Upvotes: -1

matt forsythe
matt forsythe

Reputation: 3922

If you simply need to check to see if a user is in a specific role then use SpringSecurityUtils.ifAllGranted which takes a single String as an argument which contains a comma-delimited list of roles. It will return true if the current user belongs to all of them. SpringSecurityUtils also has methods like ifAnyGranted, ifNotGranted, etc, so it should work for whatever it is you are trying to accomplish.

Upvotes: 4

Mike Sickler
Mike Sickler

Reputation: 34461

You can inject springSecurityService into your controller:

def springSecurityService

and then in your action, call:

def roles = springSecurityService.getPrincipal().getAuthorities()

See the docs here.

Upvotes: 34

Burt Beckwith
Burt Beckwith

Reputation: 75681

From a controller you can use two methods the plugin adds to the metaclass, getPrincipal and isLoggedIn:

def myAction = {
   if (loggedIn) {
      // will be a List of String
      def roleNames = principal.authorities*.authority
   }
}

If the action is secured you can skip the loggedIn/isLoggedIn() check.

Upvotes: 20

Related Questions