AppFuseSecurityMethods2 |
|
Your trail: |
Difference between
version 10
and
version 7:
At line 1 changed 1 line. |
In part one of this tutorial we got basic Method Invocation security working. But there still remains some holes in the security of our User object at the service level. For example if someone could get the controller to run UserManager.saveUser() on someone other than themselves, there is nothing at the service level to stop them. |
In [Part I|AppFuseSecurityMethods] of this tutorial we got basic Method Invocation security working. But there still remains some holes in the security of our {{User}} object at the service level. For example if someone could get the controller to run {{UserManager.saveUser()}} on someone other than themselves, there is nothing at the service level to stop them. |
At line 32 changed 1 line. |
[{Java2HtmlPlugin |
{{{ |
At line 34 changed 1 line. |
}] |
}}} |
At line 37 changed 1 line. |
[{Java2HtmlPlugin |
{{{ |
At line 41 changed 1 line. |
}] |
}}} |
Back to AppFuseSecurityMethods2,
or to the Page History.
|