This week's book giveaway is in the Performance forum.
We're giving away four copies of The Java Performance Companion and have Charlie Hunt, Monica Beckwith, Poonam Parhar, & Bengt Rutisson on-line!
See this thread for details.
Win a copy of The Java Performance Companion this week in the Performance forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Acegi configurable roles and Authorization

 
Mike Anna
Ranch Hand
Posts: 117
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Dear all,
I posted in another forum with not too much of specific help.Hence I post here.
I need to make user groups and I need to be able to configure (without interfering with the code) those user groups in such a way that I can decide which user groups will have access to which jsps.
Then within the jsps, before displaying all the fields. I need to check for the profile the user belongs to. If the user is a technician then only the tech. related fields are displayed. If the user is admin all the fields are displayed on the jsp.

I have been challenged in finding a proper approach that I can follow for this.
I plan to use ACEGI with spring MVC.

I have read enough blogs, other posts and googled for it.
Any advice on what direction I can follow, will be greatly appreciated.

Thank you so much for your time.
 
Ken Krebs
Ranch Hand
Posts: 451
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Well you can get the list of roles for each user from whatever your provider is, i.e. LDAP server, database, or even a properties file.

As to displaying/hiding information based on the user's roles, Acegi provides a jsp tag library that makes it very easy.
[ August 07, 2007: Message edited by: Ken Krebs ]
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic