Spring Security - Third Edition

The custom ACL permission declaration

As stated in the earlier discussion on permission declarations, permissions are nothing but logical names for integer bit values. As such, it's possible to extend the o.s.s.acls.domain.BasePermission class and declare your own permissions. We'll cover a very straightforward scenario here, where we create a new ACL permission called ADMIN_READ. This is a permission that will be granted only to administrative users and will be assigned to protect resources that only administrators could read. Although a contrived example for the JBCP calendar application, this type of use of custom permissions occurs quite often in situations dealing with personally identifiable information (for example, social security ...