15.7.2. Permission checks for PermissionManager operations

To invoke PermissionManager methods, the currently authenticated user must be authorized to perform that management operation. The following table lists the permissions required to invoke a particular method.

Table 15.12. Permission Management Security Permissions

Method
Permission Target
Permission Action
listPermissions()
The specified target.
seam.read-permissions
grantPermission()
The target of the specified Permission, or each of the targets for the specified list of Permissions (depending on the method called).
seam.grant-permission
grantPermission()
The target of the specified Permission.
seam.grant-permission
grantPermissions()
Each of the targets of the specified list of Permissions.
seam.grant-permission
revokePermission()
The target of the specified Permission.
seam.revoke-permission
revokePermissions()
Each of the targets of the specified list of Permissions.
seam.revoke-permission