P
P
Pavel Talaiko2019-07-17 17:07:54
Spring
Pavel Talaiko, 2019-07-17 17:07:54

How to correctly manage access to each Page'Note' object using the @PostFilter annotation (Spring Security)?

Good afternoon.
Wrote my own springSecurityFilter (spring bean) to methods.

@PostFilter("@securityFilterNote.canGetNote(filterObject)")

filterObject is a Note object. In a method there is a check of the rights and any checks important.
And so, there is a method returning Page<Note>and here a question how to use my filter?
5d2f318b604a4141436488.png
@Query and SpEL - whereas it is correct to pass an object in SpEL and the access logic is more complicated than just hasRole(), etc. Unclear.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question