I'm looking for a good security framework that allows to annotate parameter based access rules to methods.
Basicly i want to check if the authenticated user is allowed to call a certain method with a specific object as a parameter.
Spring security would serve my needs but because of this (spring forum) i'm looking for alternatives if i'm unable to get it to work.
Requirements:
- method security based on config or annotations, i want to avoid puting my security code insite my service methods
- rules are based on parameters of the methods, simple role based security is not enough
- spring support out of the box is a plus
Any recommendations?