security - Authorization for objects in Java EE -
my web application requires access control content displayed users. users may accessing same page content shown depend on access rights.
for example, if have following data:
book | roles __________________________________ foo | rolea bar | roleb baz | rolea, roleb
users belonging rolea
see foo
& baz
.
i'm looking framework can already. requirements in data access control in java ee technologies similar mine , spring security suggested there.
however, i'll able change access rights through ui without having change code , redeploy it. can spring security or other framework this?
yes 1 of main functions of spring security.
when user logs in via spring security userdetailsservice used load additional metadata , user permissions. userdetailsservice
dao , typically used connect db , load user data in security context.
you can define userdetailsservice
in security namespace config.
this on writing one.
Comments
Post a Comment