Annotation Interface IsAuthorizedResourceOwnerOrAdminOrAnonymous
@Target(METHOD)
@Retention(RUNTIME)
@PreAuthorize("hasRole(\'TRUSTED_CLIENT\') OR @userValidator.isAnonymous(authentication, #relatedPartyId) OR @userValidator.isResourceOwner(authentication, #relatedPartyId)")
public @interface IsAuthorizedResourceOwnerOrAdminOrAnonymous
Annotation for securing rest endpoints.
Users that have role TRUSTED_CLIENT, users that own the resource or anonymous users can retrieve data from this endpoint.
Users that have role TRUSTED_CLIENT, users that own the resource or anonymous users can retrieve data from this endpoint.
- Since:
- 1907