Enable security

src/main/java/de/dpunkt/myaktion/services/DonationServiceBean.java

@@ -40,7 +40,7 @@ public class DonationServiceBean implements DonationService {
 
     //----------------------------------------------------------------------------------------------
 
-    //@RolesAllowed("Organizer")
+    @RolesAllowed("Organizer")
     @Override
     public List<Donation> getDonationList(Long campaignId) {
         Campaign managedCampaign = entityManager.find(Campaign.class, campaignId);
@@ -51,8 +51,8 @@ public class DonationServiceBean implements DonationService {
         return donations;
     }
 
+    @PermitAll
     @Override
-    //@PermitAll
     public void addDonation(Long campaignId, Donation donation) {
         Campaign managedCampaign = entityManager.find(Campaign.class, campaignId);
         donation.setCampaign(managedCampaign);
@@ -60,8 +60,8 @@ public class DonationServiceBean implements DonationService {
         entityManager.persist(donation);
     }
 
+    @PermitAll
     @Override
-    //@PermitAll
     public void transferDonations() {
         logger.log(Level.INFO, "log.transferDonation.start");
 
@@ -75,8 +75,8 @@ public class DonationServiceBean implements DonationService {
         logger.log(Level.INFO, "log.transferDonation.done", new Object[] { donations.size() });
     }
 
+    @PermitAll
     @Override
-    //@PermitAll
     public List<Donation> getDonationListPublic(Long campaignId) throws ObjectNotFoundException {
         Campaign managedCampaign = entityManager.find(Campaign.class, campaignId);
         if (managedCampaign == null) {

src/main/webapp/WEB-INF/jboss-web.xml

 <jboss-web>
-	<security-domain>my-aktion</security-domain>
+    <security-domain>mongo-auth</security-domain>
 </jboss-web>
\ No newline at end of file

src/main/webapp/WEB-INF/web.xml

@@ -4,12 +4,9 @@
 	xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee 
             http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
 	version="3.1">
-	<!-- <login-config>
-		<auth-method>FORM</auth-method>
-		<form-login-config>
-			<form-login-page>/login.jsf</form-login-page>
-			<form-error-page>/loginError.jsf</form-error-page>
-		</form-login-config>
+	<login-config>
+		<auth-method>BASIC</auth-method>
+		<realm-name>my-aktion authentification</realm-name>
 	</login-config>
 	<security-constraint>
 		<web-resource-collection>
@@ -33,5 +30,5 @@ http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
 	<servlet-mapping>
 		<servlet-name>javax.ws.rs.core.Application</servlet-name>
 		<url-pattern>/rest/*</url-pattern>
-	</servlet-mapping> -->
+	</servlet-mapping>
 </web-app>
\ No newline at end of file