Support multiple id values in controller action authorization

[matthewjrose87]

Minimized the upstream differences that were in request #38

[pmcneil]

Thanks Matthew.

Looking at this you're trying to make a permstring like:

book:delete:23,34,45,67,82

which is fair enough, but is that usable out of the box???

How would we document it and it's use? (hint: please provide doco :-) )

[matthewjrose87]

Peter,

The modification simply allows you to pass multiple id values to a controller/action when using the default authorization method.

For instance, in our application there are many scenarios where we may make a request for something like:

/vehicle/status?id=5&id=7&id=13 instead of requesting /vehicle/status/5, /vehicle/status/7, etc separately.

The existing default authorization method doesn't support this, but shiro itself is plenty capable of checking against a permission string with multiple instance IDs.

[pmcneil]

Sounds good, and looks good, I'll merge it. We really need some help with the doco including example projects if you're interested??