<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>ACL Management on Palmyra</title>
    <link>https://palmyra.dev/docs/api/backend/extensions/acl-management/</link>
    <description>Recent content in ACL Management on Palmyra</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <atom:link href="https://palmyra.dev/docs/api/backend/extensions/acl-management/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>PalmyraPermissionEvaluator</title>
      <link>https://palmyra.dev/docs/api/backend/extensions/acl-management/palmyra-permission-evaluator/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>https://palmyra.dev/docs/api/backend/extensions/acl-management/palmyra-permission-evaluator/</guid>
      <description>&lt;h1 id=&#34;palmyrapermissionevaluator&#34;&gt;PalmyraPermissionEvaluator&lt;a class=&#34;anchor&#34; href=&#34;#palmyrapermissionevaluator&#34;&gt;#&lt;/a&gt;&lt;/h1&gt;&#xA;&lt;p&gt;&lt;code&gt;com.palmyralabs.palmyra.ext.aclmgmt.service.PalmyraPermissionEvaluator&lt;/code&gt;&lt;/p&gt;&#xA;&lt;h2 id=&#34;overview&#34;&gt;Overview&lt;a class=&#34;anchor&#34; href=&#34;#overview&#34;&gt;#&lt;/a&gt;&lt;/h2&gt;&#xA;&lt;p&gt;Spring Security &lt;code&gt;PermissionEvaluator&lt;/code&gt; implementation. Annotated &lt;code&gt;@Component&lt;/code&gt; — once &lt;code&gt;palmyra-dbacl-mgmt&lt;/code&gt; is on the classpath, it registers automatically and answers every &lt;code&gt;hasPermission(authentication, target, permission)&lt;/code&gt; expression in your &lt;code&gt;@PreAuthorize&lt;/code&gt; / &lt;code&gt;@PostAuthorize&lt;/code&gt; annotations and security-method expressions.&lt;/p&gt;&#xA;&lt;p&gt;Dispatch is &lt;strong&gt;strategy-based&lt;/strong&gt;: each &lt;code&gt;AclPermissionChecker&lt;/code&gt; bean in the context gets asked, via &lt;code&gt;supports(...)&lt;/code&gt;, whether it handles the target. The first checker that claims the target wins. If no checker claims it, the default &lt;code&gt;PalmyraAclProvider&lt;/code&gt; takes over and resolves the permission against the ACL tables.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
