Spring Security - Third Edition

Defining a simple target scenario

Our simple target scenario is to grant [e-mail] read access to only the birthday party event. All other users will not have any access to any events. You will observe that this differs from our other examples, since [e-mail] is not otherwise associated with the birthday party event.

Although there are several ways to set up ACL checking, our preference is to follow the annotation-based approach that we used in this chapter's method-level annotations. This nicely abstracts the use of ACLs away from the actual interface declarations and allows for replacement (if you want) of the role declarations with something other than ACLs at a later date (should you so choose).

We'll add an annotation ...