All geek questions in one place

What are my security options for Spring Security Interface?

I use defaultConfigType by default, which is configured to use annotations.
What are my security options for Spring Security UI Controllers?

Do I need to use s2ui override on all controllers to protect them through subclasses?
Updating Spring's UI Security Plugin and adding @Secured (['ROLE_ADMIN']) on controllers?
Or is there an easier way?

Can I mix access control mechanisms (w760) (for example: annotations and static URLs).

+3
source share
1 answer

Use grails.plugins.springsecurity.controllerAnnotations.staticRulesinstead of editing or overriding controllers to add security. This is usually used for static resources such as javascript, but it is good for controllers that you cannot (or should not) edit.

You can also switch to one of the other two mechanisms (database query templates or a static map in Config.groovy), but I prefer annotations as they store security information along with the affected code.

+5
source

Source: https://habr.com/ru/post/1779084/

More articles:


All Articles