deltaspike-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Arne Limburg (JIRA)" <j...@apache.org>
Subject [jira] [Created] (DELTASPIKE-305) Support @Filters in addition to @Secures
Date Wed, 19 Dec 2012 21:07:12 GMT
Arne Limburg created DELTASPIKE-305:
---------------------------------------

             Summary: Support @Filters in addition to @Secures
                 Key: DELTASPIKE-305
                 URL: https://issues.apache.org/jira/browse/DELTASPIKE-305
             Project: DeltaSpike
          Issue Type: New Feature
            Reporter: Arne Limburg
            Assignee: Arne Limburg


When the result of a method invocation is a Collection it may be desirable not to forbid the
complete method call, but just filter the result and remove the objects that the user is not
allowed to access.

Sample business method:

@CustomSecurityBinding
public List<Thing> loadThings() {
    return ...
}

Sample authorizer method:

@Filters @CustomSecurityBinding
public boolean filter(@SecuredReturn Thing thing) {
    return thing.isAccessible();
}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message