On 09/06/10 00:39, Pierce Wetter wrote:
Right now, Shiro supports:
@RequiresRoles(String)
@RequiresPermissions(String)
I would like to suggest the following more complete, and specific set:
@RequiresAllRoles(String[] )<-- same as current RequiresRoles, except the
AND is specified, and the roles can be done via:
@RequiresAllRoles( roles={"role1", "role2"} )
@RequiresAllRoles({"role1", "role2"}) would be nice
(value instead of roles)
@RequiresAnyRoles(String[] )<--- the OR version, runs if any role is implied.
@RequiresAllPermissions(String[] )
@RequiresAnyPermissions(String[] )
SecurityCheck(allRoles, anyRoles, allPermissions, anyPermissions)<--- all in
one with one annotation
What do you all think? This is similar to what I did in tapestry-security.
Pierce
--
Willi Schoenborn / Software Development
__ CosmoCode GmbH - http://www.cosmocode.de
__ Prenzlauer Allee 36, 10405 Berlin, Germany
__ Tel +49 30 814504087, Fax +49 30 28097093
__
__ Geschaeftsfuehrung (CEO): D. Huettemann, J. Riebesell
__ Amtsgericht Berlin-Charlottenburg, HRB 74063