[SHIRO-331] The Spring ACL has a cool feature that allow you to evaluate any SpEL when doing Authorization check using annotation. This is a feature that allow doing the same with shiro.

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.1.0
• Component/s: Authorization (access control)
• Labels: Authorization SpEl, Spring
• Assignee: Unassigned
• Reporter: DIALLO Mamadou BObo
• Created: 09/Nov/11 21:38
• Updated: 17/Jan/12 22:29

Description

On Spring ACL you can annotate a function with something like this:

@PreAuthorize("hasAnyRole('ROLE_SUPER_USER','ROLE_ SYSTEM_ADMIN') and hasPermission(#id, 'com.xyz.db.domain.impl.XyzConfigImpl', 'read')")

Note the evaluation of a method, the use of logic operators, the ability t use the parameters passed to the method.
This is a neccessary feature for doing any ACL like control check from an annotation because otherwise you're obliged to do the check your self from inside the method body.