[SHIRO-175] Improve Set of permission and role checks

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.0
• Component/s: Authorization (access control)
• Assignee: Kalle Korhonen
• Reporter: Pierce Wetter
• Created: 09/Jun/10 17:11
• Updated: 30/Jul/12 21:36
• Resolved: 03/Aug/10 04:31

Description

Both the shiro tag library and tapestry-security have seen fit to extend the permissions and role checks. It would be nice to have a complete set of annotations and permissions checks as follows:

Right now, Shiro supports:

@RequiresRoles(String)

@RequiresPermissions(String)

These have the additionally issue that multiple values are separated by commas, which conflicts with commas in the permission strings.

I would like to suggest the following more complete, and specific set:

@RequiresAllRoles(String[] ) <-- same as current RequiresRoles, except the AND is specified, and the roles can be done via:

@RequiresAllRoles(

{"role1", "role2"}

)

@RequiresAnyRoles(String[] ) <--- the OR version, runs if any role is implied.

@RequiresAllPermissions(String[] )
@RequiresAnyPermissions(String[] )

SecurityCheck(allRoles, anyRoles, allPermissions, anyPermissions) <--- all in one with one annotation