Question

Is it possible at all for me to use a wildcard in the access property of the <sec:authorize /> tag.

Currently I have
<sec:authorize access="hasRole('TICKET_VIEW') or hasRole('TICKET_EDIT')">

but I would like to be able to use
<sec:authorize access="hasRole('TICKET_*')">

Is this possible or does anyone know a work-around that would accomplish the same thing?

Thanks

Answer 1

It’s possible in Spring EL starting from Spring 3.x. The expression you’re looking for is hasAnyRole(..).

So it should look like this:

<sec:authorize access="hasAnyRole('TICKET_VIEW', 'TICKET_EDIT')">
    ...
</sec:authorize>

Here’s a link for some more Spring EL expressions:
http://static.springsource.org/spring-security/site/docs/3.0.x/reference/el-access.html