[
https://issues.apache.org/jira/browse/JEXL-458?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18075251#comment-18075251
]
Gary D. Gregory commented on JEXL-458:
--------------------------------------
I think the terminology we want is "grant-based". For example, in JAAS, you
"deny" everything and only allow what has "grant" statements.
> Improve permissions expressivity
> --------------------------------
>
> Key: JEXL-458
> URL: https://issues.apache.org/jira/browse/JEXL-458
> Project: Commons JEXL
> Issue Type: Improvement
> Affects Versions: 3.6.2
> Reporter: Henri Biestro
> Assignee: Henri Biestro
> Priority: Major
> Fix For: 3.6.3
>
>
> Improve permissions expressivity by adding positive permissions (strictly
> allow what is specified) to offer finer control compared to negative
> (strictly deny what is specified).
> Improve also class + {method, field} check so overrides may also override
> permissions.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
