Spring Security - Third Edition

Adding ACLs to newly created events

Currently, if a user creates a new event, it will not be visible to the user in the All Events view, since we are using the <sec:authorize-acl> tag to only display event objects that the user has access to. Let's update our DefaultCalendarService interface so that when a user creates a new event, they are granted read access to that event and it will be displayed for them on the All Events page. 

Let's take a look at the following steps to add ACLs to newly created events:

1. The first step is to update our constructor to accept MutableAclService and UserContext:

        src/main/java/com/packtpub/springsecurity/service/        DefaultCalendarService.java public class DefaultCalendarService implements CalendarService ...