SEC-2316: Unable to specify ConfigAttribute RUN_AS_ in a straight-forward way

[spring-projects-issues]

Stefan Norberg (Migrated from SEC-2316) said:

Hi,
I need to specify the RUN_AS_ROLE_FOO config attribute on a method/bean, but as there is no support for @Runas (and that the JEE spec doesn't seem to allow that to method level anyway?) I am forced to add the RUN_AS_ROLE_FOO.

My issue is that I can't add the RunAs-functionality without adding an ACL that hence will deny all access to the method/bean.

It would be nice to have RUN_AS_ROLE to have it's own annotation for clarity.
It's not very user friendly at this point and the documentation is not very clear on how to use the run-as-functionality.