Arne Limburg created DELTASPIKE-305:
---------------------------------------
Summary: Support @Filters in addition to @Secures
Key: DELTASPIKE-305
URL: https://issues.apache.org/jira/browse/DELTASPIKE-305
Project: DeltaSpike
Issue Type: New Feature
Reporter: Arne Limburg
Assignee: Arne Limburg
When the result of a method invocation is a Collection it may be desirable not
to forbid the complete method call, but just filter the result and remove the
objects that the user is not allowed to access.
Sample business method:
@CustomSecurityBinding
public List<Thing> loadThings() {
return ...
}
Sample authorizer method:
@Filters @CustomSecurityBinding
public boolean filter(@SecuredReturn Thing thing) {
return thing.isAccessible();
}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
