de.hybris.platform.permissionswebservices.security

Annotation Type IsAuthorizedEmployee

@Target(value=METHOD)
 @Retention(value=RUNTIME)
public @interface IsAuthorizedEmployee

Annotation for securing rest endpoints.
Only users with given principalUid who are part of employeegroup are allowed to access their resources.
Employees who are part of employeemanagergroup are able to access all resources. Users are also able to access information about any group their are part of.

Path variable or request parameter with name principalUid should be used in request mapping for this annotation to work properly.