Right now, Shiro supports:

  @RequiresRoles(String)

  @RequiresPermissions(String)

  I would like to suggest the following more complete, and specific set:


  @RequiresAllRoles(String[] )  <-- same as current RequiresRoles, except the 
AND is specified, and the roles can be done via:

  @RequiresAllRoles( roles={"role1", "role2"} )
  
  @RequiresAnyRoles(String[] )   <--- the OR version, runs if any role is 
implied. 

  @RequiresAllPermissions(String[] )
  @RequiresAnyPermissions(String[] )

  SecurityCheck(allRoles, anyRoles, allPermissions, anyPermissions)  <--- all 
in one with one annotation

 What do you all think? This is similar to what I did in tapestry-security. 

 Pierce

   

Reply via email to