• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

looking for any pattern for security-authorization (howto protect a resource?)

 
Ranch Hand
Posts: 755
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi all,

I'm looking for any design with reference to security. I wish to create some entities/resources (eg., car, Truck, Flight, Hotel) and to secure them against Groups (set of users)

Example:
Group A (user1, user2 & user3) can access flight1 and hotel2
Group B (user4, user5) can access flight1, car6, car8 and truck8

Is there any design-pattern to 'secure' a resource and to check if a user/group has access-right? I read about JAAS but the one million pages focus primarily on authentication (and I need authorization).

Thanks for any tip!
 
Ranch Hand
Posts: 124
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
try spring acegi security, it uses user(database table, or in memory resource) information to do authentication and combines user and role(database table or in memory resource) to do authorization. So in your case, group should be your user, and role should hold the privileges to each group.
 
My name is Inigo Montoya, you killed my father, prepare to read a tiny ad:
a bit of art, as a gift, the permaculture playing cards
https://gardener-gift.com
reply
    Bookmark Topic Watch Topic
  • New Topic