Task #645 (closed)
Opened 12 years ago
Closed 12 years ago
Add interceptor for @RolesAllowed to OMERO.blitz
| Reported by: | jamoore | Owned by: | jamoore |
|---|---|---|---|
| Priority: | critical | Milestone: | 3.0-Beta2 |
| Component: | Security | Version: | 3.0-Beta1 |
| Keywords: | blitz, security, roles, iteration4 | Cc: | |
| Resources: | n.a. | Referenced By: | n.a. |
| References: | n.a. | Remaining Time: | n.a. |
| Sprint: | n.a. |
Description
Currently, OmeroBlitz has no method-level security since the @RolesAllowed enforcement is done by the application server. There needs to be an interceptor added to the blitz stack.
Change History (1)
comment:1 Changed 12 years ago by jmoore
- Resolution set to fixed
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.
You may also have a look at Agilo extensions to the ticket.
r1392 contains an implementation for this. There are optimizations to be had, but this will work for now.
See #664 and #665