eclipse-ee4j / eclipse-ee4j/jersey
Docs regarding RolesAllowedDynamicFeature and sub-resource locators
Open
- Dominant language
- Java
- Stars
- 730
- Forks
- 382
- PR merge metrics
- No merged PRs in 30d
Description
In Chapter 16, Example 16.6 says:
> In our example, the annotation will only apply to the `getSubResource()` method as it is the only method that does not override the annotation by defining custom role-based security settings using the `@RolesAllowed` annotation.
However, according to #3021:
> The rolesallowed annotation needs to be applied on the actual resource or resource method directly.
Tried version 2.25.1 and `@RolesAllowed` does not applied on sub-resource locators indeed. I think the document should be corrected since it is intended to not applied on sub-resource locators...?
Contributor guide
Assessment
This issue has not been assessed yet.