Stage 5 3. Micro Services [online] studies _day18 user authorization _13- fine-grained authorization - introduced fine-grained authorization

3 Fine-grained authorization
3.1 needs analysis
What is the fine-grained authorization?
Fine-grained authorization, also known as authorization data range, ie the same user has different operating authority, but the range of data that can be operated is not the same. A
example: User A and User B are teaching institutions, they have "My Courses" privileges, but two users to query the data is not the same.
What fine-grained authorization of the project have?
For example:
my curriculum, teaching institutions only allowed to query information in the course of this teaching institutions.
My elective, students are only allowed to check their enrollment.
How to achieve fine-grained authorization?
Fine-grained authorization involving different service logic, the service layer is usually implemented, depending on the user for verification, query different parameters according to different
data or different data operation.


Authorized spring Security is not good to achieve fine-grained

query their own curriculum in an institution