Acls & Roles

[a3ris]

Hi,

I have a business requirement where a user (i.e accountant) with a role (i.e ROLE_ACCOUNT) creates an account. At creation (ROLE_ACCOUNTs can create) I create a permission (BasePermission.ADMINISTRATION) for this accountant username.

On the system I also have a user (i.e admin) with a role (i.e ROLE_ADMINISTRATOR) who needs FULL access to whatever accountants create.

What is the best way of doing this with acls? One way would be to create another admin permission for this ROLE. Is there a better, cleaner way? Maybe use some kind of inheriting?

Thank you for the help,
Julian.

[tkelley353]

Check out the hierarchical roles stuff:

http://static.springframework.org/sp...age-frame.html

[a3ris]

Thanks tkelley353. I already have implemented hierarchal roles.

Though this is not my problem. My question is is there any way for the ACLS for object with id 1 to be overridden by an administrator who didn't create object 1?

[a3ris]

104 replies and no answer? Please guys, help me out

Would a custom AccessDecisionVoter do the job for this?

[Kodeks]

have same problem