Description
We should add an @Authorization("needed right") annotation which can be used like this:
- Added to methods
- Preserved in the javadoc, so that people know what methods require programming rights or admin rights
- Used by a custom Velocity introspector to check the rights, thus replacing the many if(hasProgrammingRights()) checks spread around the code
Attachments
Issue Links
- blocks
-
XWIKI-2181 Velocity Introspector that restricts access to methods that require Programming rights
- Open