Uploaded image for project: 'PicketLink'
  1. PicketLink
  2. PLINK-575

Authorization annotations should be usable on view configs

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • PLINK_2.6.0.Final
    • DELTASPIKE
    • None

      Currently, the authorization annotations (@RolesAllowed, @LoggedIn, ...) are implemented using @SecurityBindingType and @Secures.

      This precludes them from usage which could be expected of a PicketLink DeltaSpike extension, and that is usage of the annotations on ViewConfigs, since DeltaSpike's JSF module is nicely integrated with it's Security module.
      This section in DS docs shows how views can be secured using @Secured: http://deltaspike.apache.org/jsf.html#security-integration-via-secured

      Therefore, it would allow broader application of the PL DS extension if the annotations were implemented using @Secured, maybe like this:
      https://gist.github.com/rsmeral/e593410d619a3883da4d

      The proposed gist surely needs a review, but the approach is verified to work in https://github.com/rsmeral/deltaspike-examples/tree/master/expense-tracker

            psilva@redhat.com Pedro Igor Craveiro
            rsmeral Ron Šmeral (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: