You're not making permission on the Supervisor but on the User .. so if document supervisor changes, user still has the permission to view this document. But if users who can see this document also change with supervisor, then my friend, you gotta change permission on all the users too. But as your self how many iterations (user permissions) will you have to make if you change a supervisor .. my guess would be that up to 1000 users you wont even notice that update of permissions occurred. Otherwise make a batch job that changes permissions on users when needed and lock the document meanwhile.
Regards Armando -- View this message in context: http://shiro-user.582556.n2.nabble.com/Advise-on-authorization-strategy-tp6312150p6313147.html Sent from the Shiro User mailing list archive at Nabble.com.
