sirius.web.security

Annotation Type NotPermission

@Retention(value=RUNTIME)
 @Target(value={METHOD,TYPE})
 @Repeatable(value=NotPermissionList.class)
public @interface NotPermission

Expects the absence of the given permission in oder to execute the annotated element.

Can be placed on annotation aware elements like implementations of StructuredService or controller methods (implementations of Controller).

Uses UserContext.getCurrentUser() to obtain the current user and calls UserInfo.hasPermission(String) with the given value prepended with an exclamation mark to check if the current user is authorized.

See Also:

UserInfo.hasPermission(String)

Required Element Summary

Required Elements

Modifier and Type	Required Element and Description
String	value Names the permission which has to be ABSENT for the current user in order to execute the annotated element

Element Detail

value

public abstract String value

Names the permission which has to be ABSENT for the current user in order to execute the annotated element

Returns:

the permission to check