You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to pgga...@googlegroups.com
Hi,
I am a researcher trying to study authorization using web frameworks. I came upon your application through github. I have a question about the authorization choices you have made; specifically why the method getBreadcrumbById in AlbumService.java does not have a PostAuthorize annotation while other methods that return List<Album> do.
Best,
Divya Muthukumaran
Graduate Student
Penn State University.
chotchki
unread,
Jul 6, 2013, 10:03:04 AM7/6/13
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to pgga...@googlegroups.com, div...@gmail.com
Hi Divya, I've been extremely busy so I haven't worked on that code base in a while so I'm not 100% certain of my reasoning at the time. Looking at the code, I would say that it is a bug that I missed PostAuthorize on that method.