-
Enhancement
-
Resolution: Won't Do
-
Major
-
None
-
PLINK_2.6.0.Final
-
None
Currently, the authorization annotations (@RolesAllowed, @LoggedIn, ...) are implemented using @SecurityBindingType and @Secures.
This precludes them from usage which could be expected of a PicketLink DeltaSpike extension, and that is usage of the annotations on ViewConfigs, since DeltaSpike's JSF module is nicely integrated with it's Security module.
This section in DS docs shows how views can be secured using @Secured: http://deltaspike.apache.org/jsf.html#security-integration-via-secured
Therefore, it would allow broader application of the PL DS extension if the annotations were implemented using @Secured, maybe like this:
https://gist.github.com/rsmeral/e593410d619a3883da4d
The proposed gist surely needs a review, but the approach is verified to work in https://github.com/rsmeral/deltaspike-examples/tree/master/expense-tracker