users@javaee-security-spec.java.net

[javaee-security-spec users] [jsr375-experts] Re: [JSR 375 Scope]Voter based authorization access

From: Alex Kosowski <alex.kosowski_at_oracle.com>
Date: Sat, 04 Apr 2015 13:00:46 -0400

Hi Rudy,

Would you please add an example in the proposals repo in Github?

Thank you,
Alex

On 3/31/15 5:34 AM, Rudy De Busscher wrote:
> Alex,
>
> Done, see https://java.net/jira/browse/JAVAEE_SECURITY_SPEC-25
>
> regards
> Rudy
>
> On 31 March 2015 at 02:05, Alex Kosowski <alex.kosowski_at_oracle.com
> <mailto:alex.kosowski_at_oracle.com>> wrote:
>
> Hi Rudy,
>
> The items under the Epic names are really just to give some
> context to the epic. If you would like to propose the use of
> "voters" to perform authorization, please create a New Feature
> JIRA task.
>
> Thanks,
> Alex
>
>
>
> On 3/30/15 12:44 PM, Rudy De Busscher wrote:
>> Alex,
>>
>> Great document. When Java EE developers will have these
>> possibilities, a lot of use cases will be covered.
>>
>> Maybe I would like to propose a small addition;
>>
>> _4.6 API for Authorization Interceptors_
>> The use of "voters" to perform authorization. Something like the
>> DeltaSpike AccessDecissionVoter. (1)
>> This as the class based alternative for using EL.
>>
>> Regards
>> Rudy
>>
>> (1) =
>> http://deltaspike.apache.org/javadoc/1.2.1/index.html?org/apache/deltaspike/security/api/authorization/AccessDecisionVoter.html
>>
>>
>