[SHIRO-77] Allow annotations to be parameterized based on method arguments

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Jeremy Haile
• Created: 25/Mar/09 20:14
• Updated: 03/Jul/09 04:32

Description

This would allow annotations to include dynamic values based on the String values of method arguments.

For example:

@RequiresPermissions( "editUser:${userId}" )
public void editUser( String userId ) {
...
}

If the method was called as editUser( 3 ), JSecurity would then check the permission "editUser:3" and if the current subject doesn't have the permission, an AuthorizationException would be thrown.

This should also work for the @RequiresRoles permission. An exception should also be thrown if the parameter specified cannot be found as a method argument.