Annotation Type IsAuthorizedOrderCreatorOrAdmin
-
@Target(METHOD) @Retention(RUNTIME) @PreAuthorize("@userValidator.isNotAnonymous(#productOrder) AND (hasRole(\'TRUSTED_CLIENT\') OR @userValidator.isRelatedPartyAuthorizedToPlaceOrder(authentication, #productOrder))") public @interface IsAuthorizedOrderCreatorOrAdminAnnotation for securing rest endpoints.
Only users that have role TRUSTED_CLIENT or users that obtained authorization for the provided party are able to consume the endpoint.- Since:
- 1907