Method call why not be intercepted by MethodSecurityIntercep

[aaron8tang]

Hi,Ben

Thanks for your response!

I've tried MethodSecurityInterceptor. Below is my application context config and some code snippet, it's a long post.

The application is based on an old architecture, business method is called in jsp code, so I write a Spring bean as a wrapper
of the business method code, e.g. call PositionManager.getPositions in SecurityPositionManager.getPositions. See the code
example below.

With contacts example as the template, I changed something, it works except that method calls aren't intercepted by MethodSecurityInterceptor.

Because I'm a newbie to Spring & AcegiSecurity,maybe I don't really understand some idea.

1.applicationContext-acegi-security.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http&#58;//www.springframework.org/dtd/spring-beans.dtd">
<beans>
   <!-- ======================== AUTHENTICATION ======================= -->
   <bean id="authenticationManager" class="net.sf.acegisecurity.providers.ProviderManager">
      <property name="providers">
         <list>
            <ref local="daoAuthenticationProvider"/>
         </list>
      </property>
   </bean>

   <bean id="jdbcDaoImpl" class="net.sf.acegisecurity.providers.dao.jdbc.JdbcDaoImpl">
      <property name="dataSource"><ref bean="dataSource"/></property>
   </bean>

   <bean id="passwordEncoder" class="net.sf.acegisecurity.providers.encoding.Md5PasswordEncoder"/>

   <bean id="daoAuthenticationProvider" class="net.sf.acegisecurity.providers.dao.DaoAuthenticationProvider">
      <property name="authenticationDao"><ref local="jdbcDaoImpl"/></property>
      <property name="userCache"><ref local="userCache"/></property>
      <property name="passwordEncoder"><ref local="passwordEncoder"/></property>
   </bean>

   <bean id="userCache" class="net.sf.acegisecurity.providers.dao.cache.EhCacheBasedUserCache">
      <property name="minutesToIdle"><value>5</value></property>
   </bean>

   <bean id="loggerListener" class="net.sf.acegisecurity.providers.dao.event.LoggerListener"/>

   <bean id="basicProcessingFilter" class="net.sf.acegisecurity.ui.basicauth.BasicProcessingFilter">
      <property name="authenticationManager"><ref local="authenticationManager"/></property>
      <property name="authenticationEntryPoint"><ref local="basicProcessingFilterEntryPoint"/></property>
   </bean>

   <bean id="basicProcessingFilterEntryPoint" class="net.sf.acegisecurity.ui.basicauth.BasicProcessingFilterEntryPoint">
      <property name="realmName"><value>Security Realm</value></property>
   </bean>

   <bean id="httpSessionIntegrationFilter" class="net.sf.acegisecurity.ui.webapp.HttpSessionIntegrationFilter"/>

   <!-- ===================== HTTP REQUEST SECURITY ==================== -->
   <bean id="securityEnforcementFilter" class="net.sf.acegisecurity.intercept.web.SecurityEnforcementFilter">
      <property name="filterSecurityInterceptor"><ref local="filterInvocationInterceptor"/></property>
      <property name="authenticationEntryPoint"><ref local="authenticationProcessingFilterEntryPoint"/></property>
   </bean>

   <bean id="authenticationProcessingFilter" class="net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilter">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
      <property name="authenticationFailureUrl"><value>/acegilogin.jsp?login_error=1</value></property>
      <property name="defaultTargetUrl"><value>/</value></property>
      <property name="filterProcessesUrl"><value>/j_acegi_security_check</value></property>
   </bean>

   <bean id="authenticationProcessingFilterEntryPoint" class="net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilterEntryPoint">
      <property name="loginFormUrl"><value>/acegilogin.jsp</value></property>
      <property name="forceHttps"><value>false</value></property>
   </bean>

   <bean id="httpRequestAccessDecisionManager" class="net.sf.acegisecurity.vote.AffirmativeBased">
      <property name="allowIfAllAbstainDecisions"><value>false</value></property>
      <property name="decisionVoters">
         <list>
            <ref bean="roleVoter"/>
         </list>
      </property>
   </bean>

   <!-- Note the order that entries are placed against the objectDefinitionSource is critical.
        The FilterSecurityInterceptor will work from the top of the list down to the FIRST pattern that matches the request URL.
        Accordingly, you should place MOST SPECIFIC &#40;ie a/b/c/d.*&#41; expressions first, with LEAST SPECIFIC &#40;ie a/.*&#41; expressions last -->
   <bean id="filterInvocationInterceptor" class="net.sf.acegisecurity.intercept.web.FilterSecurityInterceptor">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
      <property name="accessDecisionManager"><ref local="httpRequestAccessDecisionManager"/></property>
      <property name="objectDefinitionSource">
         <value>
			    CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
				\A/secure/super.*\Z=ROLE_WE_DONT_HAVE
				\A/secure/.*\Z=ROLE_SUPERVISOR,ROLE_USER
         </value>
      </property>
   </bean>
</beans>

2.applicationContext-common-business.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http&#58;//www.springframework.org/dtd/spring-beans.dtd">
<beans>
    <bean id="dataSource" class="org.springframework.jdbc.datasource.DriverManagerDataSource">
        <property name="driverClassName">
            <value>org.gjt.mm.mysql.Driver</value>
        </property>
        <property name="url">
            <value>jdbc&#58;mysql&#58;//127.0.0.1&#58;3306/acegi</value>
        </property>
        <property name="username">
            <value>root</value>
        </property>
        <property name="password">
            <value>password</value>
        </property>
    </bean>
	
	<bean id="transactionManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
		<property name="dataSource"><ref local="dataSource"/></property>
	</bean>
	
	<bean id="transactionInterceptor" class="org.springframework.transaction.interceptor.TransactionInterceptor">
    	<property name="transactionManager"><ref bean="transactionManager"/></property>
		<property name="transactionAttributeSource">
			<value>
				com.xxx.jaidwapfactory.security.SecurityManager.getAllRecipients=PROPAGATION_REQUIRED,readOnly
				com.xxx.jaidwapfactory.security.SecurityManager.getAll=PROPAGATION_REQUIRED,readOnly
				com.xxx.jaidwapfactory.security.SecurityManager.deletePermission=PROPAGATION_REQUIRED
				com.xxx.jaidwapfactory.security.SecurityManager.addPermission=PROPAGATION_REQUIRED
			</value>
		</property>
	</bean>

   <bean id="dataSourcePopulator" class="com.xxx.jaidwapfactory.security.DataSourcePopulator">
	   <property name="dataSource"><ref local="dataSource"/></property>
   </bean>
   
   <bean id="securityDao" class="com.xxx.jaidwapfactory.security.SecurityDaoSpring">
	   <property name="dataSource"><ref local="dataSource"/></property>
   </bean>

   <bean id="securityManager" class="org.springframework.aop.framework.ProxyFactoryBean">
      <property name="proxyInterfaces"><value>com.xxx.jaidwapfactory.security.SecurityManager</value></property>
      <property name="interceptorNames">
         <list>
            <idref local="transactionInterceptor"/>
            <!--idref bean="securityManagerSecurity"/-->
            <idref local="securityManagerTarget"/>
         </list>
      </property>
   </bean>
   <bean id="securityManagerTarget" class="com.xxx.jaidwapfactory.security.SecurityManagerBackend">
	   <property name="securityDao"><ref local="securityDao"/></property>
	   <property name="basicAclExtendedDao"><ref bean="basicAclExtendedDao"/></property>
   </bean>   
   <bean id="positionManager" class="org.springframework.aop.framework.ProxyFactoryBean">
      <property name="proxyInterfaces"><value>com.xxx.jaidwapfactory.security.SecurityPositionManager</value></property>
      <property name="interceptorNames">
         <list>
            <idref local="transactionInterceptor"/>
            <idref bean="positionManagerSecurity"/>
            <idref local="positionManagerTarget"/>
         </list>
      </property>
   </bean>
   <bean id="positionManagerTarget" class="com.xxx.jaidwapfactory.security.SecurityPositionManagerImpl">
	   <property name="basicAclExtendedDao"><ref bean="basicAclExtendedDao"/></property>       
	   <property name="securityManager"><ref bean="securityManager"/></property>       	   
   </bean>
</beans>

3.applicationContext-common-authorization.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http&#58;//www.springframework.org/dtd/spring-beans.dtd">
<beans>
   <!-- ~~~~~~~~~~~~~~~~~~ "BEFORE INVOCATION" AUTHORIZATION DEFINITIONS ~~~~~~~~~~~~~~~~ -->
   <!-- ACL permission masks used by this application -->
   <bean id="net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION" class="org.springframework.beans.factory.config.FieldRetrievingFactoryBean">
      <property name="staticField"><value>net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION</value></property>
   </bean>
   <bean id="net.sf.acegisecurity.acl.basic.SimpleAclEntry.READ" class="org.springframework.beans.factory.config.FieldRetrievingFactoryBean">
      <property name="staticField"><value>net.sf.acegisecurity.acl.basic.SimpleAclEntry.READ</value></property>
   </bean>
   <bean id="net.sf.acegisecurity.acl.basic.SimpleAclEntry.DELETE" class="org.springframework.beans.factory.config.FieldRetrievingFactoryBean">
      <property name="staticField"><value>net.sf.acegisecurity.acl.basic.SimpleAclEntry.DELETE</value></property>
   </bean>

   <!-- An access decision voter that reads ROLE_* configuration settings -->
   <bean id="roleVoter" class="net.sf.acegisecurity.vote.RoleVoter"/>

   <!-- An access decision voter that reads ACL_CONTACT_READ configuration settings -->
   <bean id="aclPositionReadVoter" class="net.sf.acegisecurity.vote.BasicAclEntryVoter">
      <property name="processConfigAttribute"><value>ACL_CONTACT_READ</value></property>
      <property name="processDomainObjectClass"><value>com.xxx.jaidwapfactory.position.concrete.PositionImpl</value></property>
      <property name="aclManager"><ref local="aclManager"/></property>
      <property name="requirePermission">
		<list>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION"/>
		    <!--ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.READ"/-->
		</list>
      </property>
   </bean>
   
   <!-- An access decision voter that reads ACL_CONTACT_DELETE configuration settings -->
   <bean id="aclPositionDeleteVoter" class="net.sf.acegisecurity.vote.BasicAclEntryVoter">
      <property name="processConfigAttribute"><value>ACL_CONTACT_DELETE</value></property>
      <property name="processDomainObjectClass"><value>com.xxx.jaidwapfactory.position.concrete.PositionImpl</value></property>
      <property name="aclManager"><ref local="aclManager"/></property>
      <property name="requirePermission">
		<list>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION"/>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.DELETE"/>
		</list>
      </property>
   </bean>

   <!-- An access decision voter that reads ACL_CONTACT_ADMIN configuration settings -->
   <bean id="aclPositionAdminVoter" class="net.sf.acegisecurity.vote.BasicAclEntryVoter">
      <property name="processConfigAttribute"><value>ACL_CONTACT_ADMIN</value></property>
      <property name="processDomainObjectClass"><value>com.xxx.jaidwapfactory.position.concrete.PositionImpl</value></property>
      <property name="aclManager"><ref local="aclManager"/></property>
      <property name="requirePermission">
		<list>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION"/>
		</list>
      </property>
   </bean>
   
   <bean id="positionAccessDecisionManager" class="net.sf.acegisecurity.vote.AffirmativeBased">
      <property name="allowIfAllAbstainDecisions"><value>false</value></property>
      <property name="decisionVoters">
         <list>
            <ref local="roleVoter"/>
            <ref local="aclPositionReadVoter"/>
            <ref local="aclPositionDeleteVoter"/>
            <ref local="aclPositionAdminVoter"/>
         </list>
      </property>
   </bean>
   <bean id="securityAccessDecisionManager" class="net.sf.acegisecurity.vote.AffirmativeBased">
      <property name="allowIfAllAbstainDecisions"><value>false</value></property>
      <property name="decisionVoters">
         <list>
            <ref local="roleVoter"/>
         </list>
      </property>
   </bean>   
   
   <!-- ========= ACCESS CONTROL LIST LOOKUP MANAGER DEFINITIONS ========= -->
   <bean id="aclManager" class="net.sf.acegisecurity.acl.AclProviderManager">
      <property name="providers">
         <list>
            <ref local="basicAclProvider"/>
         </list>
      </property>
   </bean>

   <bean id="basicAclProvider" class="net.sf.acegisecurity.acl.basic.BasicAclProvider">
      <property name="basicAclDao"><ref local="basicAclExtendedDao"/></property>
   </bean>

   <bean id="basicAclExtendedDao" class="net.sf.acegisecurity.acl.basic.jdbc.JdbcExtendedDaoImpl">
      <property name="dataSource"><ref bean="dataSource"/></property>
   </bean>

   <!-- ============== "AFTER INTERCEPTION" AUTHORIZATION DEFINITIONS =========== -->

   <bean id="afterInvocationManager" class="net.sf.acegisecurity.afterinvocation.AfterInvocationProviderManager">
      <property name="providers">
         <list>
            <ref local="afterAclRead"/>
            <ref local="afterAclCollectionRead"/>
         </list>
      </property>
   </bean>
   
   <!-- Processes AFTER_ACL_COLLECTION_READ configuration settings -->
   <bean id="afterAclCollectionRead" class="net.sf.acegisecurity.afterinvocation.BasicAclEntryAfterInvocationCollectionFilteringProvider">
      <property name="aclManager"><ref local="aclManager"/></property>
      <property name="requirePermission">
		<list>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION"/>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.READ"/>
		</list>
      </property>
   </bean>
   
   <!-- Processes AFTER_ACL_READ configuration settings -->
   <bean id="afterAclRead" class="net.sf.acegisecurity.afterinvocation.BasicAclEntryAfterInvocationProvider">
      <property name="aclManager"><ref local="aclManager"/></property>
      <property name="requirePermission">
		<list>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.ADMINISTRATION"/>
		    <ref local="net.sf.acegisecurity.acl.basic.SimpleAclEntry.READ"/>
		</list>
      </property>
   </bean>

   <!-- ================= METHOD INVOCATION AUTHORIZATION ==================== -->
   <bean id="positionManagerSecurity" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
      <property name="accessDecisionManager"><ref local="positionAccessDecisionManager"/></property>
      <property name="afterInvocationManager"><ref local="afterInvocationManager"/></property>
      <property name="objectDefinitionSource">
         <value>
				com.xxx.jaidwapfactory.security.SecurityPositionManager.addPosition=ROLE_USER
				com.xxx.jaidwapfactory.security.SecurityPositionManager.removePosition=ACL_CONTACT_ADMIN
				com.xxx.jaidwapfactory.security.SecurityPositionManager.getPositions=AFTER_ACL_COLLECTION_READ
				com.xxx.jaidwapfactory.security.SecurityPositionManager.getPosition=AFTER_ACL_READ
         </value>
      </property>
   </bean>
</beans>

4.contacts-servlet.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http&#58;//www.springframework.org/dtd/spring-beans.dtd">
<beans>

	<!-- ========================== WEB DEFINITIONS ======================= -->
    <!--
    <bean id="publicIndexController" class="com.xxx.jaidwapfactory.security.PublicIndexController">
    	<property name="contactManager"><ref bean="contactManager"/></property>
 	</bean>
    -->
    <bean id="secureIndexController" class="com.xxx.jaidwapfactory.security.SecureIndexController">
    	<property name="securityManager"><ref bean="securityManager"/></property>
 	</bean>

    <!--
    <bean id="urlMapping" class="org.springframework.web.servlet.handler.SimpleUrlHandlerMapping">
        <property name="mappings">
            <props>
                <prop key="/hello.htm">publicIndexController</prop>
                <prop key="/secure/add.htm">secureAddForm</prop>
                <prop key="/secure/index.htm">secureIndexController</prop>
                <prop key="/secure/del.htm">secureDeleteController</prop>
                <prop key="/secure/adminPermission.htm">adminPermissionController</prop>
                <prop key="/secure/deletePermission.htm">deletePermissionController</prop>
                <prop key="/secure/addPermission.htm">addPermissionForm</prop>
			</props>
        </property>
    </bean>
 
	<bean id="viewResolver" class="org.springframework.web.servlet.view.InternalResourceViewResolver">
		<property name="prefix"><value>/</value></property>
		<property name="suffix"><value>.jsp</value></property>
	</bean>
    -->
</beans>

5.web.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN' 'http&#58;//java.sun.com/dtd/web-app_2_3.dtd'>

<!--
  - Security web application
  -
  - web.xml for "filter" artifact only.
  -
  - $Id&#58; web.xml,v 1.1 2004/12/01 12&#58;31&#58;49 i Exp $
  -->

<web-app>

    <display-name>Security Sample Application</display-name>
    
	<!--
	  - Location of the XML file that defines the root application context
	  - Applied by ContextLoaderListener.
	  -->
	<context-param>
		<param-name>contextConfigLocation</param-name>
		<param-value>
			/WEB-INF/applicationContext-acegi-security.xml
			/WEB-INF/applicationContext-common-business.xml
			/WEB-INF/applicationContext-common-authorization.xml
		</param-value>
	</context-param>
	
	<context-param>
		<param-name>log4jConfigLocation</param-name>
		<param-value>/WEB-INF/classes/log4j.properties</param-value>
	</context-param>

   <!-- The <filter-mapping> to this filter is disabled by default -->
   <!--
   <filter>
        <filter-name>Acegi Channel Processing Filter</filter-name>
        <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>net.sf.acegisecurity.securechannel.ChannelProcessingFilter</param-value>
        </init-param>
    </filter>
    -->
	<!-- Responds to HTTP POSTs to j_acegi_security_check URI -->
    <filter>
        <filter-name>Acegi Authentication Processing Filter</filter-name>
        <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>net.sf.acegisecurity.ui.webapp.AuthenticationProcessingFilter</param-value>
        </init-param>
    </filter>

	<!-- Responds to HTTP requests with a BASIC &#40;RFC 1945&#41; authentication header -->
    <!--
    <filter>
        <filter-name>Acegi HTTP BASIC Authorization Filter</filter-name>
        <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>net.sf.acegisecurity.ui.basicauth.BasicProcessingFilter</param-value>
        </init-param>
    </filter>
    -->
	<!-- Obtains Authentication from HttpSession attribute, puts it into
		 ContextHolder for request duration, proceeds with request, then
		 copies Authentication from ContextHolder back into HttpSession -->
    <filter>
        <filter-name>Acegi Security System for Spring HttpSession Integration Filter</filter-name>
        <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>net.sf.acegisecurity.ui.webapp.HttpSessionIntegrationFilter</param-value>
        </init-param>
    </filter>

	<!-- Provides HTTP request URL security, and also catches
		 AcegiSecurityExceptions and sends 403 errors &#40;if access denied&#41;
		 or commences an authentication mechanism as appropriate -->

    <filter>
        <filter-name>Acegi HTTP Request Security Filter</filter-name>
        <filter-class>net.sf.acegisecurity.util.FilterToBeanProxy</filter-class>
        <init-param>
            <param-name>targetClass</param-name>
            <param-value>net.sf.acegisecurity.intercept.web.SecurityEnforcementFilter</param-value>
        </init-param>
    </filter>

	<!-- Remove the comments from the following <filter-mapping> if you'd
	     like to ensure secure URLs are only available over HTTPS -->
    <!--
    <filter-mapping>
      <filter-name>Acegi Channel Processing Filter</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
    -->
	
    <filter-mapping>
      <filter-name>Acegi Authentication Processing Filter</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>

    <!--
    <filter-mapping>
      <filter-name>Acegi HTTP BASIC Authorization Filter</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
    -->

    <filter-mapping>
      <filter-name>Acegi Security System for Spring HttpSession Integration Filter</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
    
    <filter-mapping>
      <filter-name>Acegi HTTP Request Security Filter</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
    
	<!--
	  - Loads the root application context of this web app at startup.
	  - The application context is then available via 
	  - WebApplicationContextUtils.getWebApplicationContext&#40;servletContext&#41;.
    -->
	<listener>
		<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
	</listener>

    <listener>
		<listener-class>org.springframework.web.util.Log4jConfigListener</listener-class>
	</listener>
	
  <!--
	- Provides core MVC application controller. See contacts-servlet.xml.
    -->
	<servlet>
		<servlet-name>contacts</servlet-name>
		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
		<load-on-startup>1</load-on-startup>
	</servlet>

  <!--
    - Provides web services endpoint. See remoting-servlet.xml.
    -->
    <!--
	<servlet>
		<servlet-name>remoting</servlet-name>
		<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
		<load-on-startup>2</load-on-startup>
	</servlet>
    -->
	<servlet-mapping>
    	<servlet-name>contacts</servlet-name>
    	<url-pattern>*.htm</url-pattern>
 	</servlet-mapping>
  <!--
	<servlet-mapping>
		<servlet-name>remoting</servlet-name>
		<url-pattern>/remoting/*</url-pattern>
	</servlet-mapping>
    -->
 	<welcome-file-list>
		<welcome-file>index.jsp</welcome-file>
	</welcome-file-list>

  	<taglib>
        <taglib-uri>/tags/spring</taglib-uri>
        <taglib-location>/WEB-INF/tld/spring.tld</taglib-location>
  	</taglib>
  	<!--taglib>
        <taglib-uri>/tags/authz</taglib-uri>
        <taglib-location>/WEB-INF/tld/authz.tld</taglib-location>
  	</taglib-->
</web-app>

6./secure/position_browse.jsp

<%@page contentType="text/html;charset=gb2312"%>
<%@ include file="/WEB-INF/jsp/include.jsp" %>
<%@include file="header.jsp"%>
<%
ArrayList positions = securityPositionManager.getPositions&#40;&#41;;
%>
<HTML><HEAD><TITLE>WAP Test</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312"> 
<link href="/inc/jaidstyle.css" rel=stylesheet type=text/css>
</HEAD>
<BODY>
<h3><authz&#58;authentication operation="principal"/>'s Positions</h3>
<center>
<table width="98%" >
     <tr>
     	<td colspan=6 class='title'>
     	Position List
     	</td>
     </tr>

     <tr>
    <%Position p =null;
    for&#40;int i=0;i<positions.size&#40;&#41;;i++&#41;&#123;
    	p = &#40;Position&#41;positions.get&#40;i&#41;;
    	pageContext.setAttribute&#40;"p", p&#41;;
    %>    
       <td style="word-wrap&#58;  break-word">
	       id：<a href="category_browse.jsp"><%=p.getId&#40;&#41;%></a>
		</td>    
       <td style="word-wrap&#58;  break-word">
	       Name：<%=p.getName&#40;&#41;%></a>
		</td>
		<authz&#58;acl domainObject="$&#123;p&#125;" hasPermission="16,1">
		<td>
			<A HREF="deleted.jsp?positionId=<%=p.getId&#40;&#41;%>">Del</A>
		</td>
		</authz&#58;acl>
		
		<authz&#58;acl domainObject="$&#123;p&#125;" hasPermission="1">
		<td>
			<A HREF="adminPermission.jsp?positionId=<%=p.getId&#40;&#41;%>">Admin Permission</A>
		</td>
		</authz&#58;acl>		
	</tr>
	<%&#125;%>
</table>
<p><a href="<c&#58;url value="position_create.jsp"/>">Add</a>   <p><a href="<c&#58;url value="../logoff.jsp"/>">Logoff</a>
</center>
</BODY></HTML>

7./secure/header.jsp

<%@page import="java.util.*"%>
<%@page import="com.xxx.jaidwapfactory.category.*"%>
<%@page import="com.xxx.jaidwapfactory.position.*"%>
<%@page import="com.xxx.jaidwapfactory.security.*"%>
<%@page import="net.sf.acegisecurity.acl.*"%>
<%@page import="net.sf.acegisecurity.acl.basic.*"%>
<%@page import="org.springframework.context.ApplicationContext"%>
<%@page import="org.springframework.web.bind.RequestUtils"%>
<%@page import="org.springframework.web.context.support.WebApplicationContextUtils"%>

<%
	PositionManager positionManager = PositionManager.getInstance&#40;&#41;;
	CategoryManager categoryManager = CategoryManager.getInstance&#40;&#41;;
    
    ApplicationContext context = getContext&#40;pageContext.getServletContext&#40;&#41;&#41;;
    Map beans = context.getBeansOfType&#40;SecurityPositionManager.class, false, false&#41;;
    String beanName = &#40;String&#41; beans.keySet&#40;&#41;.iterator&#40;&#41;.next&#40;&#41;;
	SecurityPositionManager securityPositionManager = &#40;SecurityPositionManager&#41; context.getBean&#40;beanName&#41;;
	
	beans = context.getBeansOfType&#40;com.xxx.jaidwapfactory.security.SecurityManager.class, false, false&#41;;
	beanName = &#40;String&#41; beans.keySet&#40;&#41;.iterator&#40;&#41;.next&#40;&#41;;
	com.xxx.jaidwapfactory.security.SecurityManager securityManager = &#40;com.xxx.jaidwapfactory.security.SecurityManager&#41; context.getBean&#40;beanName&#41;;	

	beans = context.getBeansOfType&#40;AclManager.class, false, false&#41;;
	beanName = &#40;String&#41; beans.keySet&#40;&#41;.iterator&#40;&#41;.next&#40;&#41;;
	AclManager aclManager = &#40;AclManager&#41; context.getBean&#40;beanName&#41;;	
		
%>
<%!
    protected ApplicationContext getContext&#40;ServletContext servletContext&#41; &#123;
        return WebApplicationContextUtils.getRequiredWebApplicationContext&#40;servletContext&#41;;
    &#125;
%>

8.SecurityPositionManagerImpl.java

    public ArrayList getPositions() {
        return getPositionManager().getPositions();
    }

9.PositionManagerImpl.java

    public ArrayList getPositions() {
        return positions;
    }

ok, now it's the log

[code:1:61c233dd18]
14:47:17,703 WARN Configurator:125 - No configuration found. Configuring ehcache from ehcache-failsafe.xml found in the classpath: jar:file:/D:/devhome/Tomcat5.5.4/webapps/acegijaid/WEB-INF/lib/ehcache-0.9.jar!/ehcache-failsafe.xml
14:47:18,644 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 1:
14:47:18,644 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 1:
14:47:18,654 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 2: CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
14:47:18,654 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 2: CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
14:47:18,715 DEBUG FilterInvocationDefinitionSourceEditor:106 - Line 2: Instructing mapper to convert URLs to lowercase before comparison
14:47:18,715 DEBUG FilterInvocationDefinitionSourceEditor:106 - Line 2: Instructing mapper to convert URLs to lowercase before comparison
14:47:18,725 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 3: \A/secure/super.*\Z=ROLE_WE_DONT_HAVE
14:47:18,725 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 3: \A/secure/super.*\Z=ROLE_WE_DONT_HAVE
14:47:18,765 DEBUG RegExpBasedFilterInvocationDefinitionMap:114 - Added regular expression: \A/secure/super.*\Z; attributes: [ROLE_WE_DONT_HAVE]
14:47:18,765 DEBUG RegExpBasedFilterInvocationDefinitionMap:114 - Added regular expression: \A/secure/super.*\Z; attributes: [ROLE_WE_DONT_HAVE]
14:47:18,765 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 4: \A/secure/.*\Z=ROLE_SUPERVISOR,ROLE_USER
14:47:18,765 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 4: \A/secure/.*\Z=ROLE_SUPERVISOR,ROLE_USER
14:47:18,815 DEBUG RegExpBasedFilterInvocationDefinitionMap:114 - Added regular expression: \A/secure/.*\Z; attributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:18,815 DEBUG RegExpBasedFilterInvocationDefinitionMap:114 - Added regular expression: \A/secure/.*\Z; attributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:18,815 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 5:
14:47:18,815 DEBUG FilterInvocationDefinitionSourceEditor:97 - Line 5:
14:47:18,815 INFO AbstractSecurityInterceptor:275 - Validated configuration attributes
14:47:18,815 INFO AbstractSecurityInterceptor:275 - Validated configuration attributes
14:47:22,320 INFO JdbcDaoImpl$AclsByObjectIdentityMapping:274 - RdbmsOperation with SQL [SELECT RECIPIENT, MASK FROM acl_permission WHERE acl_object_identity = ?] compiled
14:47:22,320 INFO JdbcDaoImpl$AclsByObjectIdentityMapping:274 - RdbmsOperation with SQL [SELECT RECIPIENT, MASK FROM acl_permission WHERE acl_object_identity = ?] compiled
14:47:22,330 INFO JdbcDaoImpl$ObjectPropertiesMapping:274 - RdbmsOperation with SQL [SELECT CHILD.ID, CHILD.OBJECT_IDENTITY, CHILD.ACL_CLASS, PARENT.OBJECT_IDENTITY as PARENT_OBJECT_IDENTITY FROM acl_object_identity as CHILD LEFT OUTER JOIN acl_object_identity as PARENT ON CHILD.parent_object=PARENT.id WHERE CHILD.object_identity = ?] compiled
14:47:22,330 INFO JdbcDaoImpl$ObjectPropertiesMapping:274 - RdbmsOperation with SQL [SELECT CHILD.ID, CHILD.OBJECT_IDENTITY, CHILD.ACL_CLASS, PARENT.OBJECT_IDENTITY as PARENT_OBJECT_IDENTITY FROM acl_object_identity as CHILD LEFT OUTER JOIN acl_object_identity as PARENT ON CHILD.parent_object=PARENT.id WHERE CHILD.object_identity = ?] compiled
14:47:22,330 INFO JdbcExtendedDaoImpl$LookupPermissionIdMapping: 274 - RdbmsOperation with SQL [SELECT id FROM acl_permission WHERE acl_object_identity = ? AND recipient = ?] compiled
14:47:22,330 INFO JdbcExtendedDaoImpl$LookupPermissionIdMapping: 274 - RdbmsOperation with SQL [SELECT id FROM acl_permission WHERE acl_object_identity = ? AND recipient = ?] compiled
14:47:22,340 INFO JdbcExtendedDaoImpl$AclPermissionInsert:274 - RdbmsOperation with SQL [INSERT INTO acl_permission (id, acl_object_identity, recipient, mask) VALUES (?, ?, ?, ?)] compiled
14:47:22,340 INFO JdbcExtendedDaoImpl$AclPermissionInsert:274 - RdbmsOperation with SQL [INSERT INTO acl_permission (id, acl_object_identity, recipient, mask) VALUES (?, ?, ?, ?)] compiled
14:47:22,340 INFO JdbcExtendedDaoImpl$AclObjectIdentityInsert:27 4 - RdbmsOperation with SQL [INSERT INTO acl_object_identity (id, object_identity, parent_object, acl_class) VALUES (?, ?, ?, ?)] compiled
14:47:22,340 INFO JdbcExtendedDaoImpl$AclObjectIdentityInsert:27 4 - RdbmsOperation with SQL [INSERT INTO acl_object_identity (id, object_identity, parent_object, acl_class) VALUES (?, ?, ?, ?)] compiled
14:47:22,350 INFO JdbcExtendedDaoImpl$AclPermissionDelete:274 - RdbmsOperation with SQL [DELETE FROM acl_permission WHERE acl_object_identity = ? AND recipient = ?] compiled
14:47:22,350 INFO JdbcExtendedDaoImpl$AclPermissionDelete:274 - RdbmsOperation with SQL [DELETE FROM acl_permission WHERE acl_object_identity = ? AND recipient = ?] compiled
14:47:22,360 INFO JdbcExtendedDaoImpl$AclObjectIdentityDelete:27 4 - RdbmsOperation with SQL [DELETE FROM acl_object_identity WHERE id = ?] compiled
14:47:22,360 INFO JdbcExtendedDaoImpl$AclObjectIdentityDelete:27 4 - RdbmsOperation with SQL [DELETE FROM acl_object_identity WHERE id = ?] compiled
14:47:22,550 INFO JdbcExtendedDaoImpl$AclPermissionUpdate:274 - RdbmsOperation with SQL [UPDATE acl_permission SET mask = ? WHERE id = ?] compiled
14:47:22,550 INFO JdbcExtendedDaoImpl$AclPermissionUpdate:274 - RdbmsOperation with SQL [UPDATE acl_permission SET mask = ? WHERE id = ?] compiled
14:47:22,911 DEBUG BasicAclEntryVoter:216 - processDomainObjectClass=com.xxx.jaidwapfactory.po sition.concrete.PositionImpl
14:47:22,911 DEBUG BasicAclEntryVoter:216 - processDomainObjectClass=com.xxx.jaidwapfactory.po sition.concrete.PositionImpl
14:47:22,911 DEBUG BasicAclEntryVoter:216 - processDomainObjectClass=com.xxx.jaidwapfactory.po sition.concrete.PositionImpl
14:47:22,911 DEBUG BasicAclEntryVoter:216 - processDomainObjectClass=com.xxx.jaidwapfactory.po sition.concrete.PositionImpl
14:47:22,921 DEBUG BasicAclEntryVoter:216 - processDomainObjectClass=com.xxx.jaidwapfactory.po sition.concrete.PositionImpl
14:47:22,921 DEBUG BasicAclEntryVoter:216 - processDomainObjectClass=com.xxx.jaidwapfactory.po sition.concrete.PositionImpl
14:47:23,141 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.removePosition] with attributes [[ACL_CONTACT_ADMIN]]
14:47:23,141 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.removePosition] with attributes [[ACL_CONTACT_ADMIN]]
14:47:23,141 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.removePosition] with attributes [[ACL_CONTACT_ADMIN]]
14:47:23,141 INFO MethodDefinitionMap:114 - Adding secure method [public abstract void com.xxx.jaidwapfactory.security.SecurityPositionMa nager.removePosition(com.xxx.jaidwapfactory.po sition.Position)] with attributes [[ACL_CONTACT_ADMIN]]
14:47:23,141 INFO MethodDefinitionMap:114 - Adding secure method [public abstract void com.xxx.jaidwapfactory.security.SecurityPositionMa nager.removePosition(com.xxx.jaidwapfactory.po sition.Position)] with attributes [[ACL_CONTACT_ADMIN]]
14:47:23,141 INFO MethodDefinitionMap:114 - Adding secure method [public abstract void com.xxx.jaidwapfactory.security.SecurityPositionMa nager.removePosition(com.xxx.jaidwapfactory.po sition.Position)] with attributes [[ACL_CONTACT_ADMIN]]
14:47:23,141 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.getPositions] with attributes [[AFTER_ACL_COLLECTION_READ]]
14:47:23,141 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.getPositions] with attributes [[AFTER_ACL_COLLECTION_READ]]
14:47:23,141 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.getPositions] with attributes [[AFTER_ACL_COLLECTION_READ]]
14:47:23,151 INFO MethodDefinitionMap:114 - Adding secure method [public abstract java.util.ArrayList com.xxx.jaidwapfactory.security.SecurityPositionMa nager.getPositions()] with attributes [[AFTER_ACL_COLLECTION_READ]]
14:47:23,151 INFO MethodDefinitionMap:114 - Adding secure method [public abstract java.util.ArrayList com.xxx.jaidwapfactory.security.SecurityPositionMa nager.getPositions()] with attributes [[AFTER_ACL_COLLECTION_READ]]
14:47:23,151 INFO MethodDefinitionMap:114 - Adding secure method [public abstract java.util.ArrayList com.xxx.jaidwapfactory.security.SecurityPositionMa nager.getPositions()] with attributes [[AFTER_ACL_COLLECTION_READ]]
14:47:23,151 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.getPosition] with attributes [[AFTER_ACL_READ]]
14:47:23,151 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.getPosition] with attributes [[AFTER_ACL_READ]]
14:47:23,151 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.getPosition] with attributes [[AFTER_ACL_READ]]
14:47:23,151 INFO MethodDefinitionMap:114 - Adding secure method [public abstract com.xxx.jaidwapfactory.position.Position com.xxx.jaidwapfactory.security.SecurityPositionMa nager.getPosition(java.lang.String)] with attributes [[AFTER_ACL_READ]]
14:47:23,151 INFO MethodDefinitionMap:114 - Adding secure method [public abstract com.xxx.jaidwapfactory.position.Position com.xxx.jaidwapfactory.security.SecurityPositionMa nager.getPosition(java.lang.String)] with attributes [[AFTER_ACL_READ]]
14:47:23,151 INFO MethodDefinitionMap:114 - Adding secure method [public abstract com.xxx.jaidwapfactory.position.Position com.xxx.jaidwapfactory.security.SecurityPositionMa nager.getPosition(java.lang.String)] with attributes [[AFTER_ACL_READ]]
14:47:23,151 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.addPosition] with attributes [[ROLE_USER]]
14:47:23,151 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.addPosition] with attributes [[ROLE_USER]]
14:47:23,151 DEBUG MethodDefinitionMap:164 - Adding secure method [com.xxx.jaidwapfactory.security.SecurityPosit ionManager.addPosition] with attributes [[ROLE_USER]]
14:47:23,161 INFO MethodDefinitionMap:114 - Adding secure method [public abstract void com.xxx.jaidwapfactory.security.SecurityPositionMa nager.addPosition(com.xxx.jaidwapfactory.posit ion.Position)] with attributes [[ROLE_USER]]
14:47:23,161 INFO MethodDefinitionMap:114 - Adding secure method [public abstract void com.xxx.jaidwapfactory.security.SecurityPositionMa nager.addPosition(com.xxx.jaidwapfactory.posit ion.Position)] with attributes [[ROLE_USER]]
14:47:23,161 INFO MethodDefinitionMap:114 - Adding secure method [public abstract void com.xxx.jaidwapfactory.security.SecurityPositionMa nager.addPosition(com.xxx.jaidwapfactory.posit ion.Position)] with attributes [[ROLE_USER]]
14:47:23,161 DEBUG AfterInvocationProviderManager:123 - Evaluating AFTER_ACL_COLLECTION_READ against net.sf.acegisecurity.afterinvocation.BasicAclEntry AfterInvocationProvider@3b4b1e
14:47:23,161 DEBUG AfterInvocationProviderManager:123 - Evaluating AFTER_ACL_COLLECTION_READ against net.sf.acegisecurity.afterinvocation.BasicAclEntry AfterInvocationProvider@3b4b1e
14:47:23,161 DEBUG AfterInvocationProviderManager:123 - Evaluating AFTER_ACL_COLLECTION_READ against net.sf.acegisecurity.afterinvocation.BasicAclEntry AfterInvocationCollectionFilteringProvider@c0a9f9
14:47:23,161 DEBUG AfterInvocationProviderManager:123 - Evaluating AFTER_ACL_COLLECTION_READ against net.sf.acegisecurity.afterinvocation.BasicAclEntry AfterInvocationCollectionFilteringProvider@c0a9f9
14:47:23,161 DEBUG AfterInvocationProviderManager:123 - Evaluating AFTER_ACL_READ against net.sf.acegisecurity.afterinvocation.BasicAclEntry AfterInvocationProvider@3b4b1e
14:47:23,161 DEBUG AfterInvocationProviderManager:123 - Evaluating AFTER_ACL_READ against net.sf.acegisecurity.afterinvocation.BasicAclEntry AfterInvocationProvider@3b4b1e
14:47:23,161 INFO AbstractSecurityInterceptor:275 - Validated configuration attributes
14:47:23,161 INFO AbstractSecurityInterceptor:275 - Validated configuration attributes
14:47:23,171 DEBUG BasicAclEntryVoter:239 - Voter for class=org.aopalliance.intercept.MethodInvocation
14:47:23,171 DEBUG BasicAclEntryVoter:239 - Voter for class=org.aopalliance.intercept.MethodInvocation
14:47:23,171 DEBUG BasicAclEntryVoter:239 - Voter for class=org.aopalliance.intercept.MethodInvocation
14:47:23,171 DEBUG BasicAclEntryVoter:239 - Voter for class=org.aopalliance.intercept.MethodInvocation
14:47:23,171 DEBUG BasicAclEntryVoter:239 - Voter for class=org.aopalliance.intercept.MethodInvocation
14:47:23,171 DEBUG BasicAclEntryVoter:239 - Voter for class=org.aopalliance.intercept.MethodInvocation
14:47:32,554 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:32,554 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:32,554 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:32,554 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:32,625 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/index.jsp'
14:47:32,625 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/index.jsp'
14:47:32,625 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/index.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:32,625 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/index.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:32,625 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/index.jsp'; pattern is \A/secure/.*\Z; matched=false
14:47:32,625 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/index.jsp'; pattern is \A/secure/.*\Z; matched=false
14:47:32,625 DEBUG AbstractSecurityInterceptor:476 - Public object - authentication not attempted
14:47:32,625 DEBUG AbstractSecurityInterceptor:476 - Public object - authentication not attempted
14:47:40,376 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:40,376 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:40,376 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:40,376 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:40,416 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:40,416 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:40,416 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:40,416 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:40,416 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/hello.jsp'
14:47:40,416 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/hello.jsp'
14:47:40,416 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/hello.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:40,416 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/hello.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:40,436 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/hello.jsp'; pattern is \A/secure/.*\Z; matched=false
14:47:40,436 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/hello.jsp'; pattern is \A/secure/.*\Z; matched=false
14:47:40,436 DEBUG AbstractSecurityInterceptor:476 - Public object - authentication not attempted
14:47:40,436 DEBUG AbstractSecurityInterceptor:476 - Public object - authentication not attempted
14:47:42,158 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:42,158 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:42,158 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:42,158 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:44,692 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:44,692 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:44,692 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:44,692 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:44,692 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/secure/position_browse.jsp'
14:47:44,692 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/secure/position_browse.jsp'
14:47:44,702 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:44,702 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:44,702 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/.*\Z; matched=true
14:47:44,702 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/.*\Z; matched=true
14:47:44,702 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_browse.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:44,702 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_browse.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:44,712 DEBUG SecurityEnforcementFilter:195 - Authentication failed - adding target URL to Session: http://localhost:8080/acegijaid/secure/position_browse.jsp
net.sf.acegisecurity.AuthenticationCredentialsNotF oundException: A valid SecureContext was not provided in the RequestContext
at net.sf.acegisecurity.intercept.AbstractSecurityInt erceptor.credentialsNotFound(AbstractSecurityI nterceptor.java:520)
at net.sf.acegisecurity.intercept.AbstractSecurityInt erceptor.beforeInvocation(AbstractSecurityInte rceptor.java:388)
at net.sf.acegisecurity.intercept.web.FilterSecurityI nterceptor.invoke(FilterSecurityInterceptor.ja va:67)
at net.sf.acegisecurity.intercept.web.SecurityEnforce mentFilter.doFilter(SecurityEnforcementFilter. java:169)
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er(FilterToBeanProxy.java:105)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java&#58 ;186)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:157&#41 ;
at net.sf.acegisecurity.ui.AbstractIntegrationFilter. doFilter(AbstractIntegrationFilter.java:17 2)
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er(FilterToBeanProxy.java:105)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java&#58 ;186)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:157&#41 ;
at net.sf.acegisecurity.ui.AbstractProcessingFilter.d oFilter(AbstractProcessingFilter.java:391& #41;
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er(FilterToBeanProxy.java:105)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java&#58 ;186)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:157&#41 ;
at org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:214)
at org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke& #40;StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process&# 40;Http11Processor.java:825)
at org.apache.coyote.http11.Http11Protocol$Http11Conn ectionHandler.processConnection(Http11Protocol .java:731)
at org.apache.tomcat.util.net.PoolTcpEndpoint.process Socket(PoolTcpEndpoint.java:526)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThr ead.runIt(LeaderFollowerWorkerThread.java: 80)
at org.apache.tomcat.util.threads.ThreadPool$ControlR unnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)
14:47:44,712 DEBUG SecurityEnforcementFilter:195 - Authentication failed - adding target URL to Session: http://localhost:8080/acegijaid/secure/position_browse.jsp
net.sf.acegisecurity.AuthenticationCredentialsNotF oundException: A valid SecureContext was not provided in the RequestContext
at net.sf.acegisecurity.intercept.AbstractSecurityInt erceptor.credentialsNotFound(AbstractSecurityI nterceptor.java:520)
at net.sf.acegisecurity.intercept.AbstractSecurityInt erceptor.beforeInvocation(AbstractSecurityInte rceptor.java:388)
at net.sf.acegisecurity.intercept.web.FilterSecurityI nterceptor.invoke(FilterSecurityInterceptor.ja va:67)
at net.sf.acegisecurity.intercept.web.SecurityEnforce mentFilter.doFilter(SecurityEnforcementFilter. java:169)
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er(FilterToBeanProxy.java:105)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java&#58 ;186)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:157&#41 ;
at net.sf.acegisecurity.ui.AbstractIntegrationFilter. doFilter(AbstractIntegrationFilter.java:17 2)
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er(FilterToBeanProxy.java:105)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java&#58 ;186)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:157&#41 ;
at net.sf.acegisecurity.ui.AbstractProcessingFilter.d oFilter(AbstractProcessingFilter.java:391& #41;
at net.sf.acegisecurity.util.FilterToBeanProxy.doFilt er(FilterToBeanProxy.java:105)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java&#58 ;186)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:157&#41 ;
at org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:214)
at org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:178)
at org.apache.catalina.core.StandardHostValve.invoke& #40;StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process&# 40;Http11Processor.java:825)
at org.apache.coyote.http11.Http11Protocol$Http11Conn ectionHandler.processConnection(Http11Protocol .java:731)
at org.apache.tomcat.util.net.PoolTcpEndpoint.process Socket(PoolTcpEndpoint.java:526)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThr ead.runIt(LeaderFollowerWorkerThread.java: 80)
at org.apache.tomcat.util.threads.ThreadPool$ControlR unnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)
14:47:44,732 DEBUG AuthenticationProcessingFilterEntryPoint:176 - Redirecting to: http://localhost:8080/acegijaid/acegilogin.jsp
14:47:44,732 DEBUG AuthenticationProcessingFilterEntryPoint:176 - Redirecting to: http://localhost:8080/acegijaid/acegilogin.jsp
14:47:44,732 DEBUG AuthenticationProcessingFilterEntryPoint:176 - Redirecting to: http://localhost:8080/acegijaid/acegilogin.jsp
14:47:44,732 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:44,732 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:44,742 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:44,742 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = null
14:47:44,742 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:44,742 DEBUG AbstractIntegrationFilter:166 - Authentication not added to ContextHolder (could not extract an authentication object from the container which is an instance of Authentication)
14:47:44,742 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/acegilogin.jsp'
14:47:44,742 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980 e7'; to: '/acegilogin.jsp'
14:47:44,742 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/acegilogin.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:44,742 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/acegilogin.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:44,752 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/acegilogin.jsp'; pattern is \A/secure/.*\Z; matched=false
14:47:44,752 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/acegilogin.jsp'; pattern is \A/secure/.*\Z; matched=false
14:47:44,752 DEBUG AbstractSecurityIntercep

[aaron8tang]

14:47:44,752 DEBUG AbstractSecurityInterceptor:476 - Public object - authentication not attempted
14:47:44,752 DEBUG AbstractSecurityInterceptor:476 - Public object - authentication not attempted
14:47:46,795 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:46,795 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:46,795 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:46,795 DEBUG AbstractIntegrationFilter:195 - ContextHolder does not contain any authentication information
14:47:50,510 DEBUG AbstractProcessingFilter:311 - Request is to process authentication
14:47:50,510 DEBUG AbstractProcessingFilter:311 - Request is to process authentication
14:47:50,670 DEBUG AbstractProcessingFilter:363 - Authentication success: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@dfbb43: Username: dianne; Password: [PROTECTED]; Authenticated: false; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:50,670 DEBUG AbstractProcessingFilter:363 - Authentication success: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@dfbb43: Username: dianne; Password: [PROTECTED]; Authenticated: false; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:50,691 DEBUG AbstractProcessingFilter:381 - Redirecting to target URL from HTTP Session (or default): http://localhost:8080/acegijaid/secure/position_browse.jsp
14:47:50,691 DEBUG AbstractProcessingFilter:381 - Redirecting to target URL from HTTP Session (or default): http://localhost:8080/acegijaid/secure/position_browse.jsp
14:47:50,711 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:47:50,711 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:47:50,711 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:47:50,711 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:47:50,711 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980e7'; to: '/secure/position_browse.jsp'
14:47:50,711 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980e7'; to: '/secure/position_browse.jsp'
14:47:50,721 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:50,721 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:50,721 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/.*\Z; matched=true
14:47:50,721 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/.*\Z; matched=true
14:47:50,721 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_browse.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:50,721 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_browse.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:50,721 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@7f3b8a: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:50,721 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@7f3b8a: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:50,721 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@7f3b8a: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_browse.jsp
14:47:50,721 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@7f3b8a: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_browse.jsp
14:47:50,731 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:47:50,731 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:47:50,731 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:47:50,731 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:47:53,384 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:53,384 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:53,384 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:47:53,384 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:47:55,007 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:47:55,007 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:47:55,007 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:47:55,007 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:47:55,007 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@93bca2'; to: '/secure/position_create.jsp'
14:47:55,007 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@93bca2'; to: '/secure/position_create.jsp'
14:47:55,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:55,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:47:55,047 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create.jsp'; pattern is \A/secure/.*\Z; matched=true
14:47:55,047 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create.jsp'; pattern is \A/secure/.*\Z; matched=true
14:47:55,047 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_create.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:55,047 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_create.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:55,057 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1455d1c: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:55,057 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1455d1c: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:55,057 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1455d1c: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_create.jsp
14:47:55,057 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1455d1c: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_create.jsp
14:47:55,057 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:47:55,057 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:47:55,057 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:47:55,057 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:47:55,708 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:55,708 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:55,708 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:47:55,708 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:47:55,718 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:47:55,718 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:47:55,718 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:47:55,718 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:47:55,718 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@93bca2'; to: '/secure/inc/jaidstyle.css'
14:47:55,718 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@93bca2'; to: '/secure/inc/jaidstyle.css'
14:47:55,728 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/inc/jaidstyle.css'; pattern is \A/secure/super.*\Z; matched=false
14:47:55,728 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/inc/jaidstyle.css'; pattern is \A/secure/super.*\Z; matched=false
14:47:55,728 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/inc/jaidstyle.css'; pattern is \A/secure/.*\Z; matched=true
14:47:55,728 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/inc/jaidstyle.css'; pattern is \A/secure/.*\Z; matched=true
14:47:55,728 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/inc/jaidstyle.css; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:55,728 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/inc/jaidstyle.css; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:47:55,728 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1723c7f: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:55,728 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1723c7f: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:47:55,728 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1723c7f: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/inc/jaidstyle.css
14:47:55,728 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@1723c7f: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/inc/jaidstyle.css
14:47:55,728 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:47:55,728 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:47:55,738 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:47:55,738 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:47:55,738 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:55,738 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:47:55,738 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:47:55,738 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:48:02,017 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:48:02,017 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:48:02,017 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:48:02,017 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:48:02,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980e7'; to: '/secure/position_create_submit.jsp'
14:48:02,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980e7'; to: '/secure/position_create_submit.jsp'
14:48:02,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create_submit.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:48:02,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create_submit.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:48:02,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create_submit.jsp'; pattern is \A/secure/.*\Z; matched=true
14:48:02,017 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_create_submit.jsp'; pattern is \A/secure/.*\Z; matched=true
14:48:02,017 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_create_submit.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:48:02,017 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_create_submit.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:48:02,017 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@e1eae7: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:02,017 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@e1eae7: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:02,027 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@e1eae7: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_create_submit.jsp
14:48:02,027 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@e1eae7: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_create_submit.jsp
14:48:02,027 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:48:02,027 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:48:02,027 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:48:02,027 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:48:02,948 DEBUG JdbcExtendedDaoImpl:310 -  neoi.getClassname() + ":" + neoi.getId()=com.xxx.jaidwapfactory.position.concrete.PositionImpl:aaa
14:48:02,948 DEBUG JdbcExtendedDaoImpl:310 -  neoi.getClassname() + ":" + neoi.getId()=com.xxx.jaidwapfactory.position.concrete.PositionImpl:aaa
14:48:02,978 DEBUG JdbcExtendedDaoImpl:310 -  neoi.getClassname() + ":" + neoi.getId()=com.xxx.jaidwapfactory.position.concrete.PositionImpl:aaa
14:48:02,978 DEBUG JdbcExtendedDaoImpl:310 -  neoi.getClassname() + ":" + neoi.getId()=com.xxx.jaidwapfactory.position.concrete.PositionImpl:aaa
14:48:02,998 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:48:02,998 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:48:02,998 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:48:02,998 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:48:03,118 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:48:03,118 DEBUG AbstractIntegrationFilter:135 - extractFromContainer = net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken
14:48:03,118 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:48:03,118 DEBUG AbstractIntegrationFilter:139 - Authentication added to ContextHolder from container
14:48:03,118 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980e7'; to: '/secure/position_browse.jsp'
14:48:03,118 DEBUG RegExpBasedFilterInvocationDefinitionMap:132 - Converted URL to lowercase, from: 'org.apache.catalina.connector.RequestFacade@10980e7'; to: '/secure/position_browse.jsp'
14:48:03,118 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:48:03,118 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/super.*\Z; matched=false
14:48:03,128 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/.*\Z; matched=true
14:48:03,128 DEBUG RegExpBasedFilterInvocationDefinitionMap:144 - Candidate is: '/secure/position_browse.jsp'; pattern is \A/secure/.*\Z; matched=true
14:48:03,128 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_browse.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:48:03,128 DEBUG AbstractSecurityInterceptor:381 - Secure object: FilterInvocation: URL: /secure/position_browse.jsp; ConfigAttributes: [ROLE_SUPERVISOR, ROLE_USER]
14:48:03,128 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:03,128 DEBUG AbstractSecurityInterceptor:421 - Authenticated: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:03,138 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_browse.jsp
14:48:03,138 DEBUG AffirmativeBased:64 - Deciding, authentication=net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER,object=FilterInvocation: URL: /secure/position_browse.jsp
14:48:03,138 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:48:03,138 DEBUG AbstractSecurityInterceptor:441 - Authorization successful
14:48:03,138 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:48:03,138 DEBUG AbstractSecurityInterceptor:456 - RunAsManager did not change Authentication object
14:48:03,168 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,168 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,168 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,168 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,168 DEBUG BasicAclProvider:328 - obtainIdentity returned net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,168 DEBUG BasicAclProvider:328 - obtainIdentity returned net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,168 DEBUG AclProviderManager:100 - ACL lookup using net.sf.acegisecurity.acl.basic.BasicAclProvider
14:48:03,168 DEBUG AclProviderManager:100 - ACL lookup using net.sf.acegisecurity.acl.basic.BasicAclProvider
14:48:03,168 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,168 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,168 DEBUG BasicAclProvider:112 - Looking up: net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,168 DEBUG BasicAclProvider:112 - Looking up: net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,199 DEBUG BasicAclProvider:125 - Explicit add: net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]
14:48:03,199 DEBUG BasicAclProvider:125 - Explicit add: net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]
14:48:03,199 DEBUG GrantedAuthorityEffectiveAclsResolver:77 - Locating AclEntry[]s (from set of 1) that apply to Authentication: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:03,199 DEBUG GrantedAuthorityEffectiveAclsResolver:77 - Locating AclEntry[]s (from set of 1) that apply to Authentication: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:03,199 DEBUG GrantedAuthorityEffectiveAclsResolver:104 - Principal (from UserDetails) matches AclEntry recipient: dianne
14:48:03,199 DEBUG GrantedAuthorityEffectiveAclsResolver:104 - Principal (from UserDetails) matches AclEntry recipient: dianne
14:48:03,199 DEBUG GrantedAuthorityEffectiveAclsResolver:143 - Returning effective AclEntry array with 1 elements
14:48:03,199 DEBUG GrantedAuthorityEffectiveAclsResolver:143 - Returning effective AclEntry array with 1 elements
14:48:03,199 DEBUG AclTag:181 - Authentication: 'net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER' has: 1 AclEntrys for domain object: 'com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang; ' from AclManager: 'net.sf.acegisecurity.acl.AclProviderManager@1ef3a22'
14:48:03,199 DEBUG AclTag:181 - Authentication: 'net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER' has: 1 AclEntrys for domain object: 'com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang; ' from AclManager: 'net.sf.acegisecurity.acl.AclProviderManager@1ef3a22'
14:48:03,199 DEBUG AclTag:201 - Including tag body as found permission: 1 due to AclEntry: 'net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]'
14:48:03,199 DEBUG AclTag:201 - Including tag body as found permission: 1 due to AclEntry: 'net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]'
14:48:03,209 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,209 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,209 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,209 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,209 DEBUG BasicAclProvider:328 - obtainIdentity returned net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,209 DEBUG BasicAclProvider:328 - obtainIdentity returned net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,209 DEBUG AclProviderManager:100 - ACL lookup using net.sf.acegisecurity.acl.basic.BasicAclProvider
14:48:03,209 DEBUG AclProviderManager:100 - ACL lookup using net.sf.acegisecurity.acl.basic.BasicAclProvider
14:48:03,209 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,209 DEBUG BasicAclProvider:372 - domainInstance: com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang;  attempting to pass to constructor: public net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity(java.lang.Object) throws java.lang.IllegalAccessException,java.lang.reflect.InvocationTargetException
14:48:03,229 DEBUG BasicAclProvider:112 - Looking up: net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,229 DEBUG BasicAclProvider:112 - Looking up: net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa]
14:48:03,349 DEBUG BasicAclProvider:125 - Explicit add: net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]
14:48:03,349 DEBUG BasicAclProvider:125 - Explicit add: net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]
14:48:03,349 DEBUG GrantedAuthorityEffectiveAclsResolver:77 - Locating AclEntry[]s (from set of 1) that apply to Authentication: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:03,349 DEBUG GrantedAuthorityEffectiveAclsResolver:77 - Locating AclEntry[]s (from set of 1) that apply to Authentication: net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER
14:48:03,349 DEBUG GrantedAuthorityEffectiveAclsResolver:104 - Principal (from UserDetails) matches AclEntry recipient: dianne
14:48:03,349 DEBUG GrantedAuthorityEffectiveAclsResolver:104 - Principal (from UserDetails) matches AclEntry recipient: dianne
14:48:03,349 DEBUG GrantedAuthorityEffectiveAclsResolver:143 - Returning effective AclEntry array with 1 elements
14:48:03,349 DEBUG GrantedAuthorityEffectiveAclsResolver:143 - Returning effective AclEntry array with 1 elements
14:48:03,359 DEBUG AclTag:181 - Authentication: 'net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER' has: 1 AclEntrys for domain object: 'com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang; ' from AclManager: 'net.sf.acegisecurity.acl.AclProviderManager@1ef3a22'
14:48:03,359 DEBUG AclTag:181 - Authentication: 'net.sf.acegisecurity.providers.UsernamePasswordAuthenticationToken@136bdda: Username: dianne; Password: [PROTECTED]; Authenticated: true; Details: 127.0.0.1; Granted Authorities: ROLE_USER' has: 1 AclEntrys for domain object: 'com.xxx.jaidwapfactory.position.concrete.PositionImpl@9b59a2: Id: aaa; Name: Aaron Tang; ' from AclManager: 'net.sf.acegisecurity.acl.AclProviderManager@1ef3a22'
14:48:03,359 DEBUG AclTag:201 - Including tag body as found permission: 1 due to AclEntry: 'net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]'
14:48:03,359 DEBUG AclTag:201 - Including tag body as found permission: 1 due to AclEntry: 'net.sf.acegisecurity.acl.basic.SimpleAclEntry[net.sf.acegisecurity.acl.basic.NamedEntityObjectIdentity[Classname: com.xxx.jaidwapfactory.position.concrete.PositionImpl; Identity: aaa],dianne=A---- ...............................1 (1)]'
14:48:03,359 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:48:03,359 DEBUG SecurityEnforcementFilter:172 - Chain processed normally
14:48:03,359 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder
14:48:03,359 DEBUG AbstractIntegrationFilter:178 - Updating container with new Authentication object, and then removing Authentication from ContextHolder

[Ben Alex]

Aaron, please post follow-up messages in the same thread as the original question, as it makes it easier for others to follow the conversation.

I think your configuration of MethodSecurityInterceptor is incorrect. For example:

   <bean id="positionManagerSecurity" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
      <property name="accessDecisionManager"><ref local="positionAccessDecisionManager"/></property>
      <property name="afterInvocationManager"><ref local="afterInvocationManager"/></property>
      <property name="objectDefinitionSource">
         <value>
            com.xxx.jaidwapfactory.security.SecurityPositionManager.addPosition=ROLE_USER
            com.xxx.jaidwapfactory.security.SecurityPositionManager.removePosition=ACL_CONTACT_ADMIN
            com.xxx.jaidwapfactory.security.SecurityPositionManager.getPositions=AFTER_ACL_COLLECTION_READ
            com.xxx.jaidwapfactory.security.SecurityPositionManager.getPosition=AFTER_ACL_READ
         </value>
      </property>
   </bean>
</beans>

The ROLE_USER is the most basic type of authorization - role-based access control. The remaining configuration attributes (ACL_CONTACT_ADMIN, AFTER_ACL_READ etc) provide ACL services. ACL services relate to not only the method invocation but also to the domain object passed to or returned from the method invocation. Looking at your debug messages, it would seem you're still using the sample data in terms of defining the ACLs that apply to different invocations.

All-in-all I think you need to spend a little time with the reference manual. I updated it last night, so checkout from CVS and it will discuss the ACL capabilites in a lot better detail. Sorry to refer you back to the manual, but given I just wrote all this last night - and it's fairly comprehensive in detail - I think you'll get more value from a quick read there than reading a brief summary again.

If you modify your configuration but it still doesn't work, please post your new configuration and I'll be happy to help. In the first instance I'd urge you to not try and use the ACL capabilities - just use the RoleVoter until you've got a reasonable feel for how Acegi Security works.

[aaron8tang]

I've tried using only RoleVoter before and tried again just now.

   <bean id="positionManagerSecurity" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
      <property name="accessDecisionManager"><ref local="positionAccessDecisionManager"/></property>
      <property name="afterInvocationManager"><ref local="afterInvocationManager"/></property>
      <property name="objectDefinitionSource">
         <value>
				com.airinbox.jaidwapfactory.security.SecurityPositionManager.addPosition=ROLE_USER
				com.airinbox.jaidwapfactory.security.SecurityPositionManager.removePosition=ROLE_USER,ACL_CONTACT_ADMIN
				com.airinbox.jaidwapfactory.security.SecurityPositionManager.getPositions=ROLE_SUPERVISOR
				com.airinbox.jaidwapfactory.security.SecurityPositionManager.getPosition=ROLE_SUPERVISOR
         </value>
      </property>
   </bean>

the authorities:

+----------+-----------------+
| USERNAME | AUTHORITY       |
+----------+-----------------+
| dianne   | ROLE_USER       |
| marissa  | ROLE_SUPERVISOR |
| marissa  | ROLE_USER       |
| peter    | ROLE_USER       |
| scott    | ROLE_USER       |
+----------+-----------------+

but when executing getPositions "by" either dianne or scott, they can get all the positions created by marissa.

So, I think my problem is just as the post topic said:
Method call to the spring bean in my jsp code is not be intercepted by MethodSecurityInterceptor

I also posted some debug msg from MethodSecurityInterceptor, please see: http://forum.springframework.org/showthread.php?t=11785

[Ben Alex]

If you're needing to filter domain object instances, as seems to be the case with "getPositions", you'll need ACL security. In this case you'll need to have a configuration similar to your existing configuration. Please post the contents of your two ACL tables, as I think that'll show what the problem is.

[aaron8tang]

1.authorities

+----------+-----------------+
| USERNAME | AUTHORITY       |
+----------+-----------------+
| dianne   | ROLE_USER       |
| marissa  | ROLE_SUPERVISOR |
| marissa  | ROLE_USER       |
| peter    | ROLE_USER       |
| scott    | ROLE_USER       |
+----------+-----------------+

2.acl_object_identity

+-----+-----------------------------------------------------------------------+---------------+-----------------------------------------------+
| ID  | OBJECT_IDENTITY                                                       | PARENT_OBJECT | ACL_CLASS                                     |
+-----+-----------------------------------------------------------------------+---------------+-----------------------------------------------+
| 100 | com.xxx.jaidwapfactory.position.concrete.PositionImpl:aaron8tang |        [NULL] | net.sf.acegisecurity.acl.basic.SimpleAclEntry |
+-----+-----------------------------------------------------------------------+---------------+-----------------------------------------------+

3.acl_permission

+-----+---------------------+-----------+------+
| ID  | ACL_OBJECT_IDENTITY | RECIPIENT | MASK |
+-----+---------------------+-----------+------+
| 113 |                 100 | scott     |    1 |
+-----+---------------------+-----------+------+

4.part of applicationContext-common-authorization.xml

   <bean id="positionManagerSecurity" class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
      <property name="authenticationManager"><ref bean="authenticationManager"/></property>
      <property name="accessDecisionManager"><ref local="positionAccessDecisionManager"/></property>
      <property name="afterInvocationManager"><ref local="afterInvocationManager"/></property>
      <property name="objectDefinitionSource">
         <value>
				com.xxx.jaidwapfactory.security.SecurityPositionManager.addPosition=ROLE_USER
				com.xxx.jaidwapfactory.security.SecurityPositionManager.removePosition=ROLE_USER,ACL_CONTACT_ADMIN
				com.xxx.jaidwapfactory.security.SecurityPositionManager.getPositions=ROLE_USER,AFTER_ACL_COLLECTION_READ
				com.xxx.jaidwapfactory.security.SecurityPositionManager.getPosition=ROLE_USER,AFTER_ACL_READ
         </value>
      </property>
   </bean>

[Ben Alex]

This is a hard one to help you with given the size of stack traces etc and the number of messages. So, let's just focus on getting your getPositions method working initially.

Your MethodSecurityInterceptor appears properly configured for getPositions. Requiring ROLE_USER will force the user to be logged in, and requiring AFTER_ACL_COLLECTION_READ will ensures every Collection element returned by the getPermissions has a "read" permission.

I'm assuming you're happy using the sample users. As shown by acl_permission, "scott" is the only user who has access to acl_object_identity.id = 100, which is "com.xxx.jaidwapfactory.position.concrete.Position Impl:aaron8tang". Something troubling me is the RHS of the colon, which is "aaron8tang". If the PositionImpl.getId() returns a String, "aaron8tang", this is correct. However, identity properties are typically Integer or Long objects with no business meaning, so I'm wondering if this is correct. If your PositionImpl.getId() returns say 34, the acl_object_identity row should be "com.xxx.jaidwapfactory.position.concrete.Position Impl:34".

Could you give your application a try again with the above in mind, and post any debug messages produced by the net.sf.acegisecurity.acl package and subpackages, along with any updates you made to the database tables.

[aaron8tang]

Ben,

I review Spring's reference document and be enlighten by its 5.5.3 section, proxying interfaces.

1.I change the positionManagerTarget from an independent bean to an inner bean.

    <bean id="positionManager" class="org.springframework.aop.framework.ProxyFactoryBean">
        <property name="proxyInterfaces"><value>com.xxx.jaidwapfactory.security.SecurityPositionManager</value></property>
        
        <property name="target">
            <!--id="positionManagerTarget" -->
            <bean class="com.xxx.jaidwapfactory.security.SecurityPositionManagerImpl">
    	        <property name="basicAclExtendedDao"><ref bean="basicAclExtendedDao"/></property>       
    	        <property name="securityManager"><ref bean="securityManager"/></property>       	   
            </bean>            
        </property>
        
        <property name="interceptorNames">
            <list>
                <idref local="transactionInterceptor"/>
                <idref bean="positionManagerSecurity"/>
                <!--
                <idref local="positionManagerTarget"/>
                -->
            </list>
        </property>
    </bean>

2.then, I've to change code in /secure/header.jsp to

    ApplicationContext context = getContext(pageContext.getServletContext());
    //Map beans = context.getBeansOfType(SecurityPositionManager.class, false, false);
    String beanName = "positionManager";//(String) beans.keySet().iterator().next();
	SecurityPositionManager securityPositionManager = (SecurityPositionManager) context.getBean(beanName);

otherwise, such exception is thrown(under tomcat 5.5.4)

[ERROR,FilterSecurityInterceptor,http-8080-Processor25] ServletException
org.apache.jasper.JasperException
	at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:373)
	at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:295)
	at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:245)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at net.sf.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:77)
	at net.sf.acegisecurity.intercept.web.SecurityEnforcementFilter.doFilter(SecurityEnforcementFilter.java:169)
	at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:105)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at net.sf.acegisecurity.ui.AbstractIntegrationFilter.doFilter(AbstractIntegrationFilter.java:172)
	at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:105)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at net.sf.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:391)
	at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:105)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:825)
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:731)
	at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:526)
	at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
	at java.lang.Thread.run(Thread.java:595)
[ERROR,FilterSecurityInterceptor,http-8080-Processor25] RootCause
java.util.NoSuchElementException
	at java.util.HashMap$HashIterator.nextEntry(HashMap.java:790)
	at java.util.HashMap$KeyIterator.next(HashMap.java:823)
	at org.apache.jsp.secure.position_005fbrowse_jsp._jspService(org.apache.jsp.secure.position_005fbrowse_jsp:105)
	at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:99)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
	at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:325)
	at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:295)
	at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:245)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at net.sf.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:77)
	at net.sf.acegisecurity.intercept.web.SecurityEnforcementFilter.doFilter(SecurityEnforcementFilter.java:169)
	at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:105)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at net.sf.acegisecurity.ui.AbstractIntegrationFilter.doFilter(AbstractIntegrationFilter.java:172)
	at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:105)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at net.sf.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:391)
	at net.sf.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:105)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:186)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:825)
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:731)
	at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:526)
	at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
	at java.lang.Thread.run(Thread.java:595)

3.It works!
Because my application is based on so-called Model 1 architecture, maybe there is something special somewhere.
Your Spring framework based contacts application runs pretty well without such modification.

Thanks for your great patience to help me, Ben!

By the way, in BasicAclEntryAfterInvocationCollectionFilteringPro vider's decide method, I make a copy of returnedObject,
and then remove items from the copy instead, not from returnedObject directly. Under some circumstance, returnedObject
maybe be the only copy of business data. Perhaps in this case, I shouldn't be so lazy to reuse the reference impl, but to write my own AfterInvocationProvider.

[Ben Alex]

By the way, in BasicAclEntryAfterInvocationCollectionFilteringPro vider's decide method, I make a copy of returnedObject,
and then remove items from the copy instead, not from returnedObject directly. Under some circumstance, returnedObject
maybe be the only copy of business data. Perhaps in this case, I shouldn't be so lazy to reuse the reference impl, but to write my own AfterInvocationProvider.

Or have your business method itself perform a clone, which would seem the safest place to do it.