spring - Allow a user access to their resources -
i developing webapp spring/hibernate , restrict access on resource-specific basis. example, user able view/edit resources created or "team". how 1 implement this? have keep additional attribute in tables "owner" field? , if so, if want allow access resources broad domain (a user can access team's resources)? others more strict access control implemented (a user can access own resources)?
is there simple, practice incorporate queries? (i.e. filter maybe?)
Comments
Post a Comment