3 points | by samuelknight 13 hours ago
1 comments
Be sure to check your bean validation! If your authorization check lives inside the handler, anything validation does runs before it, under the caller's identity.
Be sure to check your bean validation! If your authorization check lives inside the handler, anything validation does runs before it, under the caller's identity.