Spring Projects Issues

**[Tim Meißner](https://jira.spring.io/secure/ViewProfile.jspa?name=tim.meissner)** commented Sure, so basically I am implementing a User Account Settings page - a user should be able to edit his own entity, so I use method security...

**[Daniel Wegener](https://jira.spring.io/secure/ViewProfile.jspa?name=dwegener)** commented Imo not a minor - once you provide more than one repository for an entity type, the behaviour of the application changes randomly, depending on which repository...

**[Oliver Drotbohm](https://jira.spring.io/secure/ViewProfile.jspa?name=olivergierke)** commented [Daniel Wegener](https://jira.spring.io/secure/ViewProfile.jspa?name=dwegener) — Does the workaround with `@Primary` work for you?

**[Daniel Wegener](https://jira.spring.io/secure/ViewProfile.jspa?name=dwegener)** commented Hi Oliver. The workaround does not work in this case since they are distinct repositories: ``` @RepositoryRestResource public interface ClientRepository extends JpaRepository { // with @PreAuthorize overwritten...

**[Oliver Drotbohm](https://jira.spring.io/secure/ViewProfile.jspa?name=olivergierke)** commented I see. I guess we need `Repositories` to leniently collect **all** repositories first, then allow a lookup with a dedicated selection criteria with the current implementations expecting...

**[benkuly](https://jira.spring.io/secure/ViewProfile.jspa?name=benkuly)** commented Is there any workaround?

**[Johannes Hiemer](https://jira.spring.io/secure/ViewProfile.jspa?name=jhiemer)** commented Having exactly the same issue and the same requirements: * One set of repositories where you have all the security annotations for the public REST endpoint *...

**[Istvan Ratkai](https://jira.spring.io/secure/ViewProfile.jspa?name=selindek)** commented Exactly the same issue here. One repository for public usage, one for internal usage without security + some extra methods

**[Johannes Hiemer](https://jira.spring.io/secure/ViewProfile.jspa?name=jhiemer)** commented I would pick up again on this issue, as I don't see why it is prioritised with "minor". To secure an application is substantially important to have...

**[Will Faithfull](https://jira.spring.io/secure/ViewProfile.jspa?name=wfaithfull)** commented I also think this is the simplest solution to secure repositories - I would also agree that it should be more than "minor". Relying on `@PreAuthorize` on...