Java：带有自定义批注的方法级授权检查

Question

Has anyone successfully used custom annotations in Java to implement security checks or authorization on method-level? Something like this:

@AccessValidator(AccessLevel.ADMIN)
public void method(){...}

Or similar.

Is this possible, preferably without using Spring etc? Thanks!

Answer 1

This is AOP's job.

You can use either Spring AOP or plain AOP.

Take a look at this:

https://en.wikipedia.org/wiki/Aspect-oriented_programming

All you have to do is create annotation, and write a @Before advice and handle that kind of security in that advice. One code, work everywhere :D