graphqlite
graphqlite copied to clipboard
feature: add the possibility to set a Security annotation over a whole class
trafficstars
In order to secure a whole controller, to be able to add a @Security("user.hasRight('MY_SUPER_RIGHT')") above a Controller class could be a game changer ;-)
Related to #196. We should look into expanding the auth and authz service interfaces to add global support. While requiring this annotation at the class level would be a step in the right direction, I'd argue that it still opens up the option for mistakes/forgetting to add it properly, etc. Therefore, a globally registered service would be ideal. How this is implemented will need to be looked into and possibly discussed.