Interface ActionAuthorizationService<U>

Type Parameters:

U - the application's subject type

All Known Implementing Classes:

StaticActionAuthorizationService

public interface ActionAuthorizationService<U>

SPI for fine-grained action checks.

Two complementary entry points map to the canonical Vaadin pattern:

• isAllowed(Object, ActionPermission) drives UI state (visibility, enablement, menu rendering).
• requireAllowed(Object, ActionPermission) is the authoritative server-side guard called immediately before a mutating or sensitive action runs.

The second check is mandatory — UI-level visibility is convenience, never the actual access control.

Method Summary

Modifier and Type	Method	Description
boolean	isAllowed(U subject, ActionPermission permission)
default void	requireAllowed(U subject, ActionPermission permission)	Throws AccessDeniedException if the subject is not allowed.

Method Details

isAllowed

boolean isAllowed(U subject,
 ActionPermission permission)

Parameters:

subject - the calling subject (may be null)

permission - the action permission to evaluate

Returns:

true if subject may execute permission

requireAllowed

default void requireAllowed(U subject,
 ActionPermission permission)

Throws AccessDeniedException if the subject is not allowed. Implementations should additionally publish an ActionDenied audit event in this case.

Parameters:

subject - the calling subject (may be null)

permission - the action permission to enforce