Details
-
Type:
Improvement
-
Status:
Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: security-0.4.6
-
Fix Version/s: security-0.5.0
-
Component/s: security
-
Labels:None
-
Testcase included:yes
-
Patch Submitted:Yes
-
Number of attachments :
Description
SecurityInterceptors should put advised MethodInvocation objects to the Environment service, so that custom AuthorizingRealm implementations could get access to parameters of invoked secured methods during permission checking.
This should make it possible to implement instance-level access control.
See this discussion for details:
http://www.mail-archive.com/users@tapestry.apache.org/msg63762.html
Patch + tests