[SHIRO-492] Subject.getRoles() functionality

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Fix Version/s: 2.0.0
• Component/s: Authorization (access control)
• Assignee: Unassigned
• Reporter: John Vines
• Created: 21/Mar/14 19:03
• Updated: 25/Dec/23 14:48

Description

Currently shiro provides the ability to respond whether or not a user has a list of Authorizations. However, while the realms have methods for getting all authorizations (protected), these are not exposed in normal use to allow asking for all Roles. This should be exposed by adding a call to Subject to getRoles, to complement it's existing hasRoles calls. This may require making some of the calls around authorizations, like getAuthorizationInfo in AuthorizingRealm, public.