[OLINGO-1491] Role management in Olingo JPA oData

• Type: Question
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: V2 2.0.11
• Component/s: odata2-jpa
• Assignee: Unassigned
• Reporter: Mahdi Ansari
• Created: 09/Nov/20 11:08
• Updated: 09/Nov/20 11:10

Description

I found an `Olingo` implementation for fetching and modifying data in a database by using odata protocol in this repository.

No the question is, if we assume I have a mechanism for detecting the user by using `JWT` same as here, how can I implement the access management for `odata` sets as well?

In the other hand, if we could detect the user's role (e.g. Admin, Employee, ...) how can I define, who can do what? I mean who can do each of CURD actions on each sets? I am looking for the best practice approach! For example, maybe by using annotations? I don't want to implement some stupid sets of if then else!

Also I am very amateur in spring!