[CXF-4829] Add OperationInfo based authorization interceptor

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.3
• Fix Version/s: 2.7.4, 2.6.7, 3.0.0-milestone1
• Component/s: Core
• Estimated Complexity: Unknown
• Assignee: Akitoshi Yoshida
• Reporter: Akitoshi Yoshida
• Created: 14/Feb/13 11:54
• Updated: 09/Apr/13 15:15
• Resolved: 15/Feb/13 10:27

Description

CXF provides a simple authorizing feature using SimpleAuthorizingInterceptor. However, this interceptor assumes there is a service class available at the endpoint and roles are assigned to its methods. That means, it does not work if there is no service class (e.g., you are using just a WSDL file). In such cases, it is more appropriate to use the service's operation information to perform authorization.