spring-projects / spring-projects/spring-security
SEC-2525: Allow dynamic resolution of permission in AclPermissionEvaluator
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 9.6k
- Forks
- 6.3k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 52
Description
Manuel EVENO (Migrated from SEC-2525) said:
In the current implementation, the requiredPermission is given through the expression used in annotation. It would be great if the required permission could be resolved dynamically (which would allow external configuration of the permissions).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading AclPermissionEvaluator and the annotation expression described in the issue. Trace how requiredPermission is currently obtained, then determine how external configuration should supply it and what compatibility constraints apply. Done means permissions can be resolved dynamically without requiring the permission value to be fixed in the annotation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100