Annotation Type IsAuthorizedResourceOwnerOrAdminOrAnonymous
-
@Target(METHOD) @Retention(RUNTIME) @PreAuthorize("hasRole(\'TRUSTED_CLIENT\') OR @userValidator.isAnonymous(authentication, #relatedPartyId) OR @userValidator.isResourceOwner(authentication, #relatedPartyId)") public @interface IsAuthorizedResourceOwnerOrAdminOrAnonymousAnnotation for securing rest endpoints.
Users that have role TRUSTED_CLIENT, users that own the resource or anonymous users can retrieve data from this endpoint.- Since:
- 1907