security - Authorization for objects in Java EE -


my web application requires access control content displayed users. users may accessing same page content shown depend on access rights.

for example, if have following data:

    book    |    roles __________________________________     foo     |    rolea     bar     |    roleb     baz     |    rolea, roleb 

users belonging rolea see foo & baz.

i'm looking framework can already. requirements in data access control in java ee technologies similar mine , spring security suggested there.

however, i'll able change access rights through ui without having change code , redeploy it. can spring security or other framework this?

yes 1 of main functions of spring security.

when user logs in via spring security userdetailsservice used load additional metadata , user permissions. userdetailsservice dao , typically used connect db , load user data in security context.

you can define userdetailsservice in security namespace config.

this on writing one.


Comments

Popular posts from this blog

c# - SharpSVN - How to get the previous revision? -

c++ - Is it possible to compile a VST on linux? -

url - Querystring manipulation of email Address in PHP -