search

agrestio / agrest

Server-side Java REST Framework for easy access to data graphs from various backends
https://agrest.io
Apache License 2.0
80 stars 34 forks source link

Split "writablePropFilter" to "createPropFilter" and "updatePropFilter" #593

Open andrus opened 1 year ago

andrus commented 1 year ago

Agrest Authorizer API supports configuring separate rules for "create" and "update" operations. We need to do the same for "prop filters". It is quite common to allow a certain property to be passed during creation, but then disallow its change on further updates.

This will affect "writablePropFilter" API as well as AgAttribute.writable and AdRelationship.writable annotation properties.