Can I secure a restful website by url?

[dacedos]

Hi,

I want to do a restful service in which URL will be something like:

myapp/users/{idUser}/subjects/{idSubject}/grades/

Can Spring security grant access only to the data under the logged user ?? I mean...

for example. I am the user 00001. I then could access to

myapp/users/00001/subjects

but not to

myapp/users/00002/subjects

I use Spring Security 3.1.3RELEASE

Thanks!!

[Rob Winch]

This is not supported via the URL, but can be done with method level security. See https://jira.springsource.org/browse/SEC-2059 for the request to support this.