Handle permissions with Spring Security

Suppose you have your fancy authentication all up and running with Spring Security, but you have to manage also authorization. You don't want to handle permissions based only on the authorities granted to the user, but want something like hasPermission('some_domain', 'permission') to check. This is where the Spring PermissionEvaluator comes into play.

Subscribe to RSS - Spring