Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-05 Thread Jacob Barrett
Can you please add a Prior Art section to your proposal discussing these alternative solutions and why they are insufficient? Thanks, Jake > On Jul 5, 2019, at 10:41 AM, Juan José Ramos wrote: > > Hello Jake, > > I've replied something similar *here [1]*. > Long story short, I haven't found

Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-05 Thread Juan José Ramos
Hello Jake, I've replied something similar *here [1]*. Long story short, I haven't found anything that really applies to our use case. The "most similar solution" is *Spring Method Security [2]*, which basically implies annotating methods with explicit configuration about the roles required to exe

Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-05 Thread Jacob Barrett
So if we don’t want to use the Java built in SecurityManager to solve this, because we feel it's too big or too inflexible for our needs, have other projects implemented something we can borrow? We can’t be the first to need something like this if Java’s solution isn’t a good fit. Again I want