• Post Reply Bookmark Topic Watch Topic
  • New Topic

Web application users&groups?  RSS feed

 
Vesko Jel
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Is there a framework that can use for adding permissions to web application? For instance users of given group to see one menu and guests other menu entries?
 
Rajah Nagur
Ranch Hand
Posts: 239
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Vesko Jel wrote:Is there a framework that can use for adding permissions to web application? For instance users of given group to see one menu and guests other menu entries?


You can Spring Security.
 
Ulf Dittmer
Rancher
Posts: 42972
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
The Servlet API provides for users, roles and groups to be defined. That information can be accessed using the HttpServletRequest.getRemoteUser, getUserPrincipal and isUserInRole methods.

For something more full-featured, check out the JAAS API and the JGuard library that adapts it to web apps.
 
Vesko Jel
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks for hints. I'll check the opportunities, but I'm wondering if build application from "0", can I construct the application, so not only one or two pages check for user's permissions, but whole framework supports that? For instance all jsp (whatever) tags allow that.
In short what to use for web users management, in the meaning of visualization?

example


 
Ulf Dittmer
Rancher
Posts: 42972
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I'm not sure what you mean by "visualization", but have you checked out the two options I mentioned? They both can protect either parts or all of the application.
 
Vesko Jel
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I meant to prevent some component(or part of it- like menu entry, or number of table columns) from displaying. I think JGuard will do the job.
 
Ulf Dittmer
Rancher
Posts: 42972
73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
If the requirements are that basic then I think JAAS/jGuard is overkill. Just go with the basci Servlet security stuff.
 
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
Boost this thread!