Question

With Deadbolt’s module we can check the restrictedResource with a ressource name and parameters in the view.

For example in my view, I have it, and it works well:

#{deadbolt.restrictedResource resourceKeys:['Domain'] , resourceParameters:['domainid':domain.id]}
   <li><a href="@{Admin.showDomain(domain.id)}">${domain.title}</a></li>
#{/deadbolt.restrictedResource}

But in my controller, I just can check the ressource name but I don’t find a way to check it in my RestrictedResourcesHandler passing the domainid with.

I am looking for a solution to do something like that:

@RestrictedResource(name = {"Domain"}, params = {domainid})
public static void showDomain(String domainid)
{
}

Thanks in advance

Answer 1

It’s not possible to have dynamic information in an annotation, but you can use params to define the name of an incoming value in the request. However, this information isn’t passed into the handler at the moment because it expects a map. While you can pass in a map of parameters from the restrictedResource tag, you can’t do this from an annotation so an empty map is passed into the handler.

Your best approach here is to pull a well-known parameter name from the request object. I need to have a rethink about the best way to do this without breaking backwards compatibility.

Steve (author of Deadbolt)