@Secured annotation in Spring Boot - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to secure the method so only users with role 'ADMIN' can access it.

Spring Boot

@Secured({"[1]"})
public void adminOnlyMethod() {
    // method logic
}

Drag options to blanks, or click blank then click option'

AROLE_ADMIN

BADMIN

CROLE_USER

DUSER

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'ADMIN' without 'ROLE_' prefix causes access to fail.

The @Secured annotation requires roles to be prefixed with 'ROLE_'. So to allow only admins, use 'ROLE_ADMIN'.

2fill in blank

medium

Complete the code to allow access to users with either 'USER' or 'ADMIN' roles.

Spring Boot

@Secured({"[1]", "ROLE_ADMIN"})
public void userOrAdminMethod() {
    // method logic
}

Drag options to blanks, or click blank then click option'

AGUEST

BROLE_USER

CROLE_GUEST

DUSER

Attempts:

3 left

💡 Hint

Common Mistakes

Omitting 'ROLE_' prefix causes access denial.

To allow multiple roles, list them in @Secured. Roles must have 'ROLE_' prefix, so use 'ROLE_USER' and 'ROLE_ADMIN'.

3fill in blank

hard

Fix the error in the annotation to correctly secure the method for 'MANAGER' role.

Spring Boot

@Secured("[1]")
public void managerMethod() {
    // method logic
}

Drag options to blanks, or click blank then click option'

AMANAGER

B[ROLE_MANAGER]

CROLE_MANAGER

D{ROLE_MANAGER}

Attempts:

3 left

💡 Hint

Common Mistakes

Using brackets or missing 'ROLE_' prefix causes errors.

@Secured expects a string or array of strings with roles prefixed by 'ROLE_'. Use "ROLE_MANAGER" as a string.

4fill in blank

hard

Fill both blanks to secure the method for roles 'ADMIN' and 'SUPERVISOR'.

Spring Boot

@Secured({"[1]", "[2]"})
public void adminSupervisorMethod() {
    // method logic
}

Drag options to blanks, or click blank then click option'

AROLE_ADMIN

BROLE_SUPERVISOR

CADMIN

DSUPERVISOR

Attempts:

3 left

💡 Hint

Common Mistakes

Using roles without 'ROLE_' prefix or wrong syntax.

Use the @Secured annotation with an array of roles, each prefixed by 'ROLE_'.

5fill in blank

hard

Fill all three blanks to secure the method for roles 'USER', 'ADMIN', and 'GUEST'.

Spring Boot

@Secured({"[1]", "[2]", "[3]"})
public void multiRoleMethod() {
    // method logic
}

Drag options to blanks, or click blank then click option'

AROLE_GUEST

BROLE_ADMIN

CROLE_USER

DGUEST

Attempts:

3 left

💡 Hint

Common Mistakes

Missing 'ROLE_' prefix or incorrect array syntax.

List all roles with 'ROLE_' prefix inside the @Secured annotation array.