AppFuseSecurityMethods2

This is version 2. It is not the current version, and thus it cannot be edited.
[Back to current version]   [Restore this version]

This tutorial adds object specific security into the mix. Another way to accomplish this would be to use an access control list, but that solution may be a bit heavy for many apps. So ACL's will be a tutorial but not included in the core of AppFuse. So without getting into ACL's we can still secure our objects by making sure the user who is authenticated can only retreive, edit or delete his User object.

Table of Contents

• [0] Prerequisites
• [1] Add UserManager.updateUser() method
• [2] Modify txProxyTemplate configuration
• [3] Create the OwnerVoter
• [4] Modify userManagerSecurity configuration
• [5] Test All

Prerequisites [#0]

Add UserManager.updateUser() method [#1]

Modify txProxyTemplate configuration [#2]

Create the OwnerVoter [#3]

Modify userManagerSecurity configuration [#4]

Test All [#5]

OwnerVoter.java

12677 bytes