Hi all,

Just a general question - I'm using the JAX-RS implementation in CXF 2.1 for
writing services and I have a requirement to secure certain aspects of the
service.

For example - I want everyone to be able to read a user but only certain
people to update to a user. In a Restful these two calls would both be
passed to the same url (update a POST, read a GET)

Almost all security solutions I know simply protect URL's and can't protect
a url for POST's but not for GET's.

Has anyone else come across this problem? Any solutions/ workarounds?

Obviously I could protect the calls programmatically but this seems a step
backwards.

Thanks,

Barry

Reply via email to