Annotation Type IsAuthorizedOrderCreatorOrAdmin


  • @Target(METHOD)
    @Retention(RUNTIME)
    @PreAuthorize("@userValidator.isNotAnonymous(#productOrder) AND (hasRole(\'TRUSTED_CLIENT\') OR @userValidator.isRelatedPartyAuthorizedToPlaceOrder(authentication, #productOrder))")
    public @interface IsAuthorizedOrderCreatorOrAdmin
    Annotation for securing rest endpoints.
    Only users that have role TRUSTED_CLIENT or users that obtained authorization for the provided party are able to consume the endpoint.
    Since:
    1907