If we can use AOP to customize the user authentication process, we can also use it to establish the access control list and authorization rules.
Given the roles, permissions, and permission sets of Chapter 4, Securing Spring MVC Applications, this recipe will implement the record deletion of employee records to ROLE_HR only. Open the Maven Eclipse ch05 project, and add the following features.
Let us simulate Spring Security's authorization process by using AOP concepts:
- Although authorization can be implemented using the Spring Security framework, this recipe will provide us with another solution using AOP concepts. Inside the package
org.packt.aop.transaction.controller, create anEmployeeControllerwhich will delete a record given anempIddetail:
@Controller
public class EmployeeController {
@Autowired
private EmployeeService employeeServiceImpl;
@RequestMapping("/deldept.html/{deptId}")
public String deleteRecord...