This one may be of interest? https://lists.apache.org/thread/pso52wffvjqvt8myb4qh2wdqropdxslo
I managed to use shiro-jaxrs so that I can now use the annotations @RequiresUser, @RequiresRoles and @RequiresPermissions directly on the JAX-RS resource classes https://shiro.apache.org/jaxrs.html#example I added karaf runtime shiro-jaxrs support to my JerseyServlet class, and made a new release: https://github.com/steinarb/servlet?tab=readme-ov-file#jersey And for the first time it feels meaningful to create roles based on permissions, since I can define the permissions directly on the JAX-RS resources.
