agrestio / agrest

Server-side Java REST Framework for easy access to data graphs from various backends
https://agrest.io
Apache License 2.0
81 stars 34 forks source link

Move read checks for attributes and relationships to IncludeMerger #588

Closed andrus closed 1 year ago

andrus commented 1 year ago

IConstraintsHandler is a leftover from the old days. We can do some of its security checks on the spot inside IncludeMerger when we are assembling ResourceEntity. Let's make this refactoring that would avoid inclusion of attributes and relationships that will later need to be excluded.

andrus commented 1 year ago

closing for now. inheritance-based permission checks may require an entirely different solution