问题
I'm looking for a good security framework that allows to annotate parameter based access rules to methods.
Basicly i want to check if the authenticated user is allowed to call a certain method with a specific object as a parameter.
Spring security would serve my needs but because of this (spring forum) i'm looking for alternatives if i'm unable to get it to work.
Requirements:
- method security based on config or annotations, i want to avoid puting my security code insite my service methods
- rules are based on parameters of the methods, simple role based security is not enough
- spring support out of the box is a plus
Any recommendations?
回答1:
Apache Shiro stands in competition to Spring Security. Is easier, covers more. See here.
来源:https://stackoverflow.com/questions/10124859/alternatives-to-spring-security-in-java-spring