AuthorizorShiro

If Shiro is configured for both authentication and authorization (as recommended), then this class is in the role of Authorizor .

However, although there are two objects, they are set up to share the same SecurityManager Shiro SecurityManager (bound to a thread-local).

API

AuthorizorShiro.java

class AuthorizorShiro {
  boolean isVisible(InteractionContext authentication, Identifier identifier)
  boolean isUsable(InteractionContext authentication, Identifier identifier)
}