[CXF-4047] OAuthContext should provide an access to OAuthPermissions

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5.2
• Fix Version/s: 2.5.2, 2.6
• Component/s: JAX-RS
• Labels: jaxrs oauth
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Sergey Beryozkin
• Created: 19/Jan/12 17:14
• Updated: 07/Feb/12 21:50
• Resolved: 19/Jan/12 17:32

Description

OAuthContext offers an access to UserSubject for OAuth services to figure out which user's resources are actually accessed.
It should also offer an access to OAuthPermission for the custom interpretation of those permissions to be possible. For example, the service code can try to validate that a client can indeed modify a calendar but only a given hour slot