Hello, In looking at the Subject interface, I see that there are many methods available for verifying that a user has a particular role/permission (or set of roles/permissions) which is great.
What I don't see is any way for the application to retrieve the complete list of permissions/roles for a user. Is this by design? I ask this question because I have a scenario where, on user login, a set of resources would automatically be made available to the user. I was hoping to model access to each resource as a permission. However, the total list of resources for is potentially very large, but the resources any individual user could access would be very small. Rather than check every single resource against the user's permission list, it would be preferable to get the user's permission list to get the list of resources to download. Does it make sense what I am trying to do...or am I trying to use permissions in a way they weren't designed for? thanks in advance, Gareth -- View this message in context: http://shiro-user.582556.n2.nabble.com/Retrieving-The-List-Of-Permissions-Or-Roles-For-A-User-tp6634613p6634613.html Sent from the Shiro User mailing list archive at Nabble.com.
