Security

Metalama lets you add cross-cutting security concerns like authorization, auditing, and encryption to your applications without writing boilerplate code.

Authorization

Metalama can be used to implement authorization by weaving aspects into your code to enforce role-based or permission-based access control. For example, you can create an aspect that checks the user’s roles or permissions before allowing access to specific methods or classes.

Audit

With Metalama, you can implement auditing by creating an aspect that logs method calls, parameter values, and execution results. This aspect can be applied to critical methods to ensure that all actions are recorded for compliance and debugging purposes.

Transparent encryption

Metalama can help implement transparent encryption by weaving aspects that encrypt and decrypt data at specific points in your code: for example, encrypting a field before it is persisted and decrypting it on read. The encryption logic stays out of your business code.