AuthorizorSecman

Note that this service has an earlier precedence than AuthorizorShiro . Conversely, AuthenticatorShiro overrides org.apache.causeway.extensions.secman.integration.authenticator.AuthenticatorSecman .

Therefore if both shiro and secman are configured, then shiro will be used for authentication, while secman will be used for authorization.

API

AuthorizorSecman.java

class AuthorizorSecman {
  boolean isVisible(InteractionContext authentication, Identifier identifier)
  boolean isUsable(InteractionContext authentication, Identifier identifier)
}