Question

How may I secure single eventhandlers by annotations?
I know how to secure Complete pages, but i have no idea how to check before invocation if a a method has an annotation.

Is this possible?

I dont want to use Spring-security

Thanks

Answer 1

ChenillKit access is a nice module.
There is also the tapestry-security module based on the security framework Apache Shiro which provides annotation like

@RequiresPermissions("news:delete")
  public void onActionFromDeleteNews(EventContext eventContext) {
     ...
  }