Right now, Shiro supports:
@RequiresRoles(String)
@RequiresPermissions(String)
I would like to suggest the following more complete, and specific set:
@RequiresAllRoles(String[] ) <-- same as current RequiresRoles, except the
AND is specified, and the roles can be done via:
@RequiresAllRoles( roles={"role1", "role2"} )
@RequiresAnyRoles(String[] ) <--- the OR version, runs if any role is
implied.
@RequiresAllPermissions(String[] )
@RequiresAnyPermissions(String[] )
SecurityCheck(allRoles, anyRoles, allPermissions, anyPermissions) <--- all
in one with one annotation
What do you all think? This is similar to what I did in tapestry-security.
Pierce