How to use the PermissionManager in a Confluence Plugin Rest Module

xeemed

I tried to use the (autowired) PermissionManager in a Confluence Rest Module as follows:

ConfluenceUser confluenceUser = AuthenticatedUserThreadLocal.get();
if(!permissionManager.isConfluenceAdministrator(confluenceUser)) {
    throw....
}

 If the user is not logged-in the exception is thrown and everything is fine but if the user is logged-in and has admin permissions I get a NullPointerException in the isConfluenceAdministrator method. The user object seems to be fine (and not NULL). The code is within a POST Method. I send the request from a custom settings page (location: system.admin).

Hasnae

This is how I build rest resources in plugins, the following shows how to include the PermissionManager

package com.atlassian.confluence.community.rest;

import com.atlassian.annotations.security.XsrfProtectionExcluded;
import com.atlassian.confluence.security.PermissionManager;
import com.atlassian.confluence.user.AuthenticatedUserThreadLocal;
import com.atlassian.confluence.user.ConfluenceUser;
import com.atlassian.plugin.spring.scanner.annotation.imports.ComponentImport;

import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.core.Response;

import static java.util.Collections.singletonMap;

@Path("/sample")
public class SampleResource {

private final PermissionManager permissionManager;

    public SampleResource(final @ComponentImport PermissionManager permissionManager) {
this.permissionManager = permissionManager;
    }

@GET
    @Produces("application/json")
@XsrfProtectionExcluded
    public Response get() {
final ConfluenceUser currentUser = AuthenticatedUserThreadLocal.get();
        if (!permissionManager.isConfluenceAdministrator(currentUser)) {
return Response.status(Response.Status.FORBIDDEN).build();
        }
return Response.ok(singletonMap("username", currentUser.getName())).build();
    }
}

and has the following package imports on the pom file definition

<Import-Package>
    com.atlassian.annotations.security,
    com.atlassian.confluence.security,
    com.atlassian.confluence.user,
    com.atlassian.user,
    javax.ws.rs,
    javax.ws.rs.core,
    org.springframework.osgi.*;resolution:="optional",
    org.eclipse.gemini.blueprint.*;resolution:="optional"
</Import-Package>

Hope this helps