Sping, Hibernate and Security

[Gerardo Tasistro]

Is there a way to use an XML configuration to limit valid SQL parameters?

In the same way I can limit what roles can invoke certain methods, can I limit the values of an expression in say a DetachedCriteria. So for example ROLE_USER can only have values 1 through 5 for the field "region" in the table "stores" ?

[Ahmad Reza Seddighi]

The book does not involve in such special cases. However, it discusses how you can use the Criteria API which handles these cases properly.

Spring Persistence with Hibernate