[DELTASPIKE-298] Post-Method-Authorizer

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.3-incubating
• Fix Version/s: 0.4
• Component/s: Security-Module
• Assignee: Arne Limburg
• Reporter: Arne Limburg
• Created: 13/Dec/12 07:35
• Updated: 02/Jun/13 10:27
• Resolved: 19/Dec/12 20:49

Description

Our current security interceptor allows security checks before the method invocation. Sometimes it is desirable to check the result of a method invocation, then throw a SecurityException and cause the transaction to be rolled back.

I propose to introduce the annotation @Result as a parameter annotation of our @Secures methods. If the annotation is present at one parameter of the method, the check will be done AFTER the invocation of the business method and can check the result of the invocation.