title: Multi-user restful api using spring boot, jpa and security
body: <p>I want to create a multi user api, where users log in to a restful service and have their own space for say a booking class.  Bookings are not shared between users.</p>
  
  <p>I'm struggling to understand what the best pattern is to create this, while utilizing as much as possible of the magic of spring boot.</p>
  
  <p>I'm using Spring Boot JPA and defining a User and Booking class with @Entity.</p>
  
  <p>My booking then references this user class.  However is there a way I can use @RepositoryRestResource or a similar annotation to automatically isolate data models for each user then use Spring Security to secure the CRUD endpoint or do I need to create my own @RestResponse that looks up users based on their Authorization and then create a findByUser method to perform the isolation?</p>
  
  <p>(note i'm new to Spring, Spring Boot etc)</p>
  
  <p>Edit: it's been suggested I look into ACLs, but i'm struggling to find good SIMPLE resources explaining how they work</p>