KnowledgeHub
Questions
Tags
Users
Search
Alex Rivera
|
Logout
Edit Question
Title
Body
So I have something like the following: public interface MyService { @PreAuthorize("hasPermission(T(Name).OBJ, T(Action).GET)") MyObj getObj(String id); } @Service public class MyServiceImpl implements MyService { @Override @Transactional public MyObj getObj(String id){ return dao.get(id); } } @Controller public class MyController { @Resource(name="myServiceImpl") private MyService service; public MyObj getObj(String id){ return service.getObj(id); } } When the method getObj(id) is called, everything is wrapped in a transaction first, then authorization is checked. Is is possible to keep this configuration and first get Spring to check for authorization, then create the transaction if the user is authorized? I've spent a good deal searching for an answer and could not find anything.
Tags (comma-separated)
Save Edits
Cancel