eclipse-ee4j / eclipse-ee4j/jersey

Docs regarding RolesAllowedDynamicFeature and sub-resource locators

Open
#3,640 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
730
Forks
382
PR merge metrics
No merged PRs in 30d

Description

In Chapter 16, Example 16.6 says:
> In our example, the annotation will only apply to the `getSubResource()` method as it is the only method that does not override the annotation by defining custom role-based security settings using the `@RolesAllowed` annotation.

However, according to #3021:
> The rolesallowed annotation needs to be applied on the actual resource or resource method directly.

Tried version 2.25.1 and `@RolesAllowed` does not applied on sub-resource locators indeed. I think the document should be corrected since it is intended to not applied on sub-resource locators...?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.