Re: [Springframework-developer] Authentication

[Brett B. <br...@po...>]

Hi

Unfortunately, JAAS only supports class based Authorisation(i.e. a user
can operate on a particular type) where a number of business cases require
instance based security (i.e. can this user operate on this specific
instance).  I have written a framework recently to support instance based
authorisation at work so I can write a new one for Spring if that's ok,
possibly sprucing it up to use AOP.

Please let me know what you think.

Cheers


Brett