Annotation Type RequiresUser


  • @Target({TYPE,METHOD})
    @Retention(RUNTIME)
    public @interface RequiresUser
    The @RequiresUser annotation requires the current Subject to be an application user for the annotated class/instance/method to be accessed or invoked. An 'application user' is defined as a Subject that has a known identity, either known due to being authenticated during the current session or remembered from 'RememberMe' services from a previous session.

    For example:

    
     @RequiresUser
     public void updateAccount(Account account) {
        //this method will only be invoked by user of known identity
     }