Annotation Type IsAuthorizedResourceOwnerOrAdminOrAnonymous


  • @Target(METHOD)
    @Retention(RUNTIME)
    @PreAuthorize("hasRole(\'TRUSTED_CLIENT\') OR @userValidator.isAnonymous(authentication, #relatedPartyId) OR @userValidator.isResourceOwner(authentication, #relatedPartyId)")
    public @interface IsAuthorizedResourceOwnerOrAdminOrAnonymous
    Annotation for securing rest endpoints.
    Users that have role TRUSTED_CLIENT, users that own the resource or anonymous users can retrieve data from this endpoint.
    Since:
    1907