[SHIRO-464] Support role mapping similar to PermissionResolver and RolePermissionResolver

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.2.2
• Fix Version/s: 2.0.0
• Component/s: Authorization (access control)
• Labels: patch patch-with-test
• Assignee: Unassigned
• Reporter: Kevin Minder
• Created: 14/Oct/13 18:10
• Updated: 06/Mar/23 08:06

Description

The basic idea is to provide a plug-in point that can be used to resolve principals to roles or map input roles to output roles that can be externalized from an AuthorizingRealm. The primary use case that is driving this for me is to be able to resolve group principals provided by an AuthenticatingRealm to a set of roles. This will allow for multiple AuthorizingRealm to share RoleMapper implementations.

Issue Links

• relates to: SHIRO-465 Support externalized principal mapping in AuthenticatingRealm and ModularRealmAuthenticator