Dec 29th, 2005, 10:26 AM
ojbect security interseptor
Hello, can any body explain me how solve follow problem.
I am developing web interface/ web service to CMS, but it's difficult to apply security on CMS level, so the problem is how made SecurityInterseptor on object instance.
For example. User "guest" try get access to file "/file.txt".
It's made call CMSManager.getFile("/file.txt") and I want to define (in ?SecurityInterseptor->objectDefinitionSource) in some way somthing like this:
/file.txt = guest (which allow user guest get access to file "/file.txt").
Is it possible in ACEGI?
I houpe Iproblem is described understandeble...
Jan 25th, 2006, 06:40 PM
You'll need to look at FilterSecurityInterceptor.objectDefinitionSource, which is generally a subclass of AbstractFilterInvocationDefinitionSource. The latter provides a public abstract ConfigAttributeDefinition lookupAttributes(String url) method that you might wish to use from your CMSManager.