search

gary-rowe / multibit-merchant

⚠️ OBSOLETE. DO NOT USE! A free and open source Bitcoin ecommerce platform, with several representative clients (online shop, admin etc). Uses Dropwizard, HAL, MongoDB etc
http://multibit.org
Other
150 stars 50 forks source link

Link authentication to authorisation #13

Closed gary-rowe closed 12 years ago

gary-rowe commented 12 years ago

Require a method of managing an Access Control List (ACL) within the Dropwizard environment. Something like the Spring Security approach, but blended with the simple @Auth annotation.

The intention is to restrict access based on the Role and Authority so that customers can get access to their private information through the public port. Staff will perform their operations against the restricted port (specific IP addresses, permitted access hours, permitted information etc).

gary-rowe commented 12 years ago

Introduce an @RestrictedTo annotation that requires a list of Authority entries. This is then looked up by the authenticator and if the user contains all referenced authorities, then the User is cleared.

cjroth commented 12 years ago

What's the status of this? Has anyone forked DropWizard with an implementation along these lines? I'd find this really useful.

gary-rowe commented 12 years ago

You can find an implementation in the develop branch. Look for uses of the @RestrictTo annotation.