lgwillmore
commented
2 years ago On holiday at the moment with bad internet, but will try to give some pointers.
For batch filtering of collection of resources there is a different function on EnforcementPoint and DecitionPoint. Not documented yet, but will do it next week.
This dies not error if empty, it will just be empty.
It seems you also want to merge data into your subject regarding roles. Implement an InformationPoint for this.
Definately going to implement a full detailed demo project soon and work on more docs.
toop
On the springboot, when a user accesses /books/list, I need to filter books data according to the data_scope range data of the currently logged in user and the category value of books. Please ask how to do this. Please give some collective examples. Thank you very much!
USER：
user | dept | data_scope admin | 1 | [,] Tom | 1 | [1,2,3] Sim | 2 | [1,2] Kat | 3 | null
BOOKS：
id | name | category 1 | book1 | 1 2 | book2 | 1 3 | Book3 | 2 4 | book4 | 3 5 | book5 | 4 6 | book6 | 5
when user admin to access the api /books/list, can visible all data，return the data:
id | name | category 1 | book1 | 1 2 | book2 | 1 3 | Book3 | 2 4 | book4 | 3 5 | book5 | 4 6 | book6 | 5
when user Tom to access the api /books/list, books.category in user.data_scope, return the data: id | name | category 1 | book1 | 1 2 | book2 | 1 3 | Book3 | 2 4 | book4 | 3
when user Sim to access the api /books/list, books.category in user.data_scope, return the data: id | name | category 1 | book1 | 1 2 | book2 | 1 3 | Book3 | 2
when user Kat to access the api /books/list, user.data_scope is null, return the exception: “access denied，missing permissions”
How to implement the above requirements in MVC and oauth2 environment? Please give some practical examples. Thank you very much!