Annotation Interface BmAuthorizedResourceOwnerOrAdmin
@Target(METHOD)
@Retention(RUNTIME)
@PreAuthorize("hasRole(\'TRUSTED_CLIENT\') OR @tuaUserValidator.isResourceOwner(authentication, #id)")
public @interface BmAuthorizedResourceOwnerOrAdmin
Annotation for securing rest endpoints.
Only users that have role TRUSTED_CLIENT or users that own the resource can retrieve data from this endpoint.
Only users that have role TRUSTED_CLIENT or users that own the resource can retrieve data from this endpoint.
- Since:
- 2208