added security checks

src/main/java/com/commafeed/backend/model/User.java

@@ -1,9 +1,15 @@
 package com.commafeed.backend.model;
 
+import java.util.Set;
+
+import javax.persistence.CascadeType;
 import javax.persistence.Column;
 import javax.persistence.Entity;
+import javax.persistence.OneToMany;
 import javax.persistence.Table;
 
+import com.google.common.collect.Sets;
+
 @Entity
 @Table(name = "USERS")
 @SuppressWarnings("serial")
@@ -18,6 +24,9 @@ public class User extends AbstractModel {
 	@Column(length = 8)
 	private byte[] salt;
 
+	@OneToMany(mappedBy = "user", cascade = CascadeType.PERSIST)
+	private Set<UserRole> roles = Sets.newHashSet();
+
 	public String getName() {
 		return name;
 	}
@@ -42,4 +51,12 @@ public class User extends AbstractModel {
 		this.salt = salt;
 	}
 
+	public Set<UserRole> getRoles() {
+		return roles;
+	}
+
+	public void setRoles(Set<UserRole> roles) {
+		this.roles = roles;
+	}
+
 }

src/main/java/com/commafeed/backend/model/UserRole.java

@@ -0,0 +1,46 @@
+package com.commafeed.backend.model;
+
+import javax.persistence.Column;
+import javax.persistence.Entity;
+import javax.persistence.JoinColumn;
+import javax.persistence.OneToOne;
+import javax.persistence.Table;
+
+@Entity
+@Table(name = "USERROLES")
+@SuppressWarnings("serial")
+public class UserRole extends AbstractModel {
+
+	@OneToOne
+	@JoinColumn(name = "user_id")
+	private User user;
+
+	@Column(name = "roleName")
+	private String role;
+
+	public UserRole() {
+
+	}
+
+	public UserRole(User user, String role) {
+		this.user = user;
+		this.role = role;
+	}
+
+	public User getUser() {
+		return user;
+	}
+
+	public void setUser(User user) {
+		this.user = user;
+	}
+
+	public String getRole() {
+		return role;
+	}
+
+	public void setRole(String role) {
+		this.role = role;
+	}
+
+}