spring security add additional access restrict rule as dynamic relationship between role and request uri











up vote
0
down vote

favorite












I know that spring security can do access validate by



.antMatchers("/auth").hasRole("ADMIN") 


But if I want to change the config, I have to restart the server



so I wander if I can do the config in the database to config the relationship dynamically



As after I login success by a form login and got the session token



I visit the url "/auth"



I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler










share|improve this question


























    up vote
    0
    down vote

    favorite












    I know that spring security can do access validate by



    .antMatchers("/auth").hasRole("ADMIN") 


    But if I want to change the config, I have to restart the server



    so I wander if I can do the config in the database to config the relationship dynamically



    As after I login success by a form login and got the session token



    I visit the url "/auth"



    I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler










    share|improve this question
























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I know that spring security can do access validate by



      .antMatchers("/auth").hasRole("ADMIN") 


      But if I want to change the config, I have to restart the server



      so I wander if I can do the config in the database to config the relationship dynamically



      As after I login success by a form login and got the session token



      I visit the url "/auth"



      I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler










      share|improve this question













      I know that spring security can do access validate by



      .antMatchers("/auth").hasRole("ADMIN") 


      But if I want to change the config, I have to restart the server



      so I wander if I can do the config in the database to config the relationship dynamically



      As after I login success by a form login and got the session token



      I visit the url "/auth"



      I do a customize rule to check if the authenticated is a validate user, If it is validated , return the "/auth" response else trigger spring security's AccessDeniedHandler







      spring-security






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 16 hours ago









      zhuochen shen

      2141613




      2141613





























          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














           

          draft saved


          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203265%2fspring-security-add-additional-access-restrict-rule-as-dynamic-relationship-betw%23new-answer', 'question_page');
          }
          );

          Post as a guest





































          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















           

          draft saved


          draft discarded



















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203265%2fspring-security-add-additional-access-restrict-rule-as-dynamic-relationship-betw%23new-answer', 'question_page');
          }
          );

          Post as a guest




















































































          Popular posts from this blog

          Schultheiß

          Verwaltungsgliederung Dänemarks

          Liste der Kulturdenkmale in Wilsdruff