acl « Development « Spring Q&A





1. Good practice to create JSP custom tag because ACL is too long ?    forum.springsource.org

Good practice to create JSP custom tag because ACL is too long ? We plan to use Spring Security in our application. we will not use ACL because we have a ...

2. Good practice to create JSP custom tag because ACL is too long ?    forum.springsource.org

Good practice to create JSP custom tag because ACL is too long ? We plan to use Spring Security in our application. we will not use ACL because we have a ...

3. tool for acl management.    forum.springsource.org

4. ACL: Implement a custom AclImpl doesn't make sense    forum.springsource.org

ACL: Implement a custom AclImpl doesn't make sense When an ACE entry is retrieved from the database, the mask value is compared inside the isGranted(List permission, List sids, boolean administrativeMode) method ...

5. Rewrite IDs or Rewrite ACL?    forum.springsource.org

Which is going to be easier: Rewrite our entities to use Longs instead of UUID strings - and migrate existing data. or Rewrite Spring ACL security to support strings instead of ...

6. Read acl by sid (instead of object)    forum.springsource.org

7. ACL Voters always return false for supports because attribute.getAttribute() is null    forum.springsource.org

Hi. I'm trying to run Spring Security 3.0.5 ACL, but my Voter always deny to support any decision. My XML is: Code:

10. ACL changes (SEC-479) and the infamous bitmask issue - is it safe to override?    forum.springsource.org

Hi all! I am looking into overcoming the "no bitwise comparison" issue in Spring ACL. As I understand from reading about the reasons behind the current implementation in SEC-1140, bitwise comparison ...

11. Spring ACL    forum.springsource.org

Spring ACL Hi everybody, So I'm trying to use Spring ACL and have a few questions. First is there a way to assign each principal or group more (positive) ACL entries? ...

12. Spring ACL problems    forum.springsource.org

Spring ACL problems I am using the new Spring Security 3.1 and have a few questions to Spring Security ACL. 1. So let's say I have an object and want to ...

13. Spring ACL Voters configuration    forum.springsource.org

So I have found the solution to my own Problem. One can define a interface and let all the Entities implement that interface then use the interface in the configuration Thanks ...

14. Any spring tag library to invoke the custom acl voters    forum.springsource.org

Any spring tag library to invoke the custom acl voters We want to decide on UI whether to hide/show some links. But for this we want access decision to be taken ...

15. ACL taglib    forum.springsource.org

ACL taglib Hello, In my web application I need to render certain components based on ACL info. In order to do so I would need a taglib, does it exist? I ...

16. ACL voters never called    forum.springsource.org





17. ACL Configuration with SpEL - NullPointer    forum.springsource.org

Hello all, I'm fairly new to Spring (and Spring Security) - currently reading the unofficial book. (Excuses in advance ) I tried setting up ACL for a dummy application, however - ...

18. ACL    forum.springsource.org

I'm using the the instance based ACL security of Acegi (0.7 snapshot from cvs). This is truly impressive piece of work (easily beats every home grown equivalents we've done . Ben, ...

19. ACL mask usage question    forum.springsource.org

What is the intended usage of ADMINISTRATION compared to READ, WRITE, CREATE, and DELETE. Is it a coarser grained access schema? Or are there other use cases? Just curious how people ...

20. AclObjectIdentity with no Acls and Acl inheritance    forum.springsource.org

AclObjectIdentity with no Acls and Acl inheritance Hi, I am working with Acls within Acegi and have found some behaviour which seems odd and contrary to the documentation. It seems that ...

21. Use of ACL Voters in the FilterSecurityInterceptor    forum.springsource.org

Use of ACL Voters in the FilterSecurityInterceptor Hey All, Is there a way to get the FilterSecurityInterceptor that gets plugged into SecurityEnforcementFilter to accept ACL voting? I've tried plugging an ACL ...

22. prepopulate acl cache    forum.springsource.org

prepopulate acl cache I would like to prepopulate my acl cache with all the acls for a particular class within my domain. What would be the best we to introduce those ...

23. ACL Usage Scenario    forum.springsource.org

ACL Usage Scenario Hello All, I'm evaluating whether I need ACLs and wanted to access the charitable and intelligent folks in this community. I'll keep my scenario simple. I have two ...

24. Using ACL    forum.springsource.org

Mar 27th, 2005, 07:08 AM #1 sherihan View Profile View Forum Posts Private Message Member Join Date Jan 2005 Posts 76 Using ACL Hi, I've been trying to use Acegi ACL ...

25. Authorities and ACL    forum.springsource.org

Authorities and ACL In my application I believe i need ACL as it requires instance based security. But If I don't setup authorities for users, Authentication doesn't work. Question/Confusion is, do ...

26. Does ACL scale up?    forum.springsource.org

Does ACL scale up? Hello everyone, In a system we're building, we are making extensive use of the ACL. For example, we have a bunch of objects: User (which can be ...

27. How to optimize ACL    forum.springsource.org

How to optimize ACL Hi, I'm new to acegi security and I'm evaluate them. I get contacts sample from CVS and I change DataSourcePopulate to populate 1.000 contacts and 10.000 ACL_OBJECT_IDENTITY. ...

28. recommendations on how to implement ACL's    forum.springsource.org

recommendations on how to implement ACL's We have roles defined for Facility Groups. Within our object network, their are many fine grained objects, which eventually trace back to objects within these ...

29. ACL based servlet filtering    forum.springsource.org

ACL based servlet filtering Hello, In an application we are developing there is a new requirement that ACL is used for controlling access to the web pages through servlet filters. As ...

30. ACL Problem    forum.springsource.org

ACL Problem Hi! I'd like to have some advice on how to best solve the following kind of ACL problem with Acegi: By default, a user should only have READ/WRITE rights ...

31. authz:acl and voters    forum.springsource.org

authz:acl and voters I have set up ACLs for a web app using v0.8.3 and I'm trying to restrict some content output via the authz:acl tag. I noticed that when I ...

32. Complex ACL problem -- solution requested    forum.springsource.org

Jul 28th, 2005, 09:09 AM #1 ozzieg View Profile View Forum Posts Private Message Junior Member Join Date May 2005 Posts 9 Complex ACL problem -- solution requested I think that ...

33. Support for Field Level ACL    forum.springsource.org

Let's say I have an object with 3 fields: id, name, description. Some users can access all three, but some can only access the name. Can I do this easily with ...

34. AuthorizationServiceException when using ACL    forum.springsource.org

Oct 27th, 2005, 06:06 PM #1 rknr55 View Profile View Forum Posts Private Message Junior Member Join Date Oct 2005 Posts 6 AuthorizationServiceException when using ACL Hi, I got the following ...

35. ACL question    forum.springsource.org

ACL question Hi, I've been looking at Acegi to see whether it can accomplish what is needed for my security requirements but I'm a little confused as to what I need ...

36. need to use personId for reciepent in ACL    forum.springsource.org

Nov 23rd, 2005, 04:53 PM #1 LORDs_diakonos View Profile View Forum Posts Private Message Member Join Date Oct 2005 Posts 79 need to use personId for reciepent in ACL Ok I ...

37. acl's for new domain object    forum.springsource.org

acl's for new domain object I have a web application using Hibernate 3.0, Spring 1.2.5, and Acegi 1.0.0 RC1, and have successfully configured authentication, role-base authorization, and *some* acl-based authorization (e.g. ...

38. ACL Caching - How does it work ?    forum.springsource.org

ACL Caching - How does it work ? Hello, I'm working on a large project implementing a big web application for a bank. In this project, the security is paramount. We ...

39. ACL Cache configuration    forum.springsource.org

Hello, do you know how the EHCache is configured in Acegi Security ACL ? For example: maximum number of elements, eviction policies (e.g. LRU, LFU, FIFO), overflowToDisk, etc. Is there a ...

40. ACL problems.    forum.springsource.org

ACL problems. I`m currently trying to use ACL security from Acegi in a webproject, but after a few hours I still don`t have a good understanding of how it works. Acegi ...

41. ACL implementation question    forum.springsource.org

ACL implementation question I am in a bit of a confusion and would like to get some comments on the following issue. We are using ACL to protect access to a ...

42. ACL not working - Why    forum.springsource.org

Feb 3rd, 2006, 07:20 AM #1 glenmartinthomas View Profile View Forum Posts Private Message Junior Member Join Date Aug 2005 Posts 17 ACL not working - Why I've been trying to ...

43. ACL MethodSecurityInterceptor no intercepting    forum.springsource.org

ACL MethodSecurityInterceptor no intercepting Everything seems fine, request security is working. Application is running and I can see the intercepter being initiated. 03-Feb-2006 17:44:33 org.acegisecurity.intercept.method.MethodDefinitio nMap addSecureMethod INFO: Adding secure method ...

44. How do I filter ACL objects on a getList invocation?    forum.springsource.org

How do I filter ACL objects on a getList invocation? I have a Project object which is a secured ACL object. I have the system working properly as far as create ...

45. ACL taking into account on object state    forum.springsource.org

ACL taking into account on object state I have businessManager that has edit method(Order). Now based on order state certain user groups can or cannot edit this object. I.e. - admin ...

46. Problem with ACL and Spring processes    forum.springsource.org

Hi, I am using ACL to secure business methods. I am also using Spring 2.0 asynch. JMS. The onMessage method of a jms listener should use an ACL secured business method. ...

47. Problem retrieving acl objects    forum.springsource.org

Mar 10th, 2006, 12:39 AM #1 chuisman9955 View Profile View Forum Posts Private Message Member Join Date Oct 2005 Location Edmonton, AB Posts 40 Problem retrieving acl objects Hello, I am ...

48. ACL management    forum.springsource.org

ACL management Just curious and maybe I'm missing something but why is there no functionality built into the BasicAclExtendedDao for deleting or fetching ACL's based on just the recipient? Something like: ...

49. Wildcard IDs in acl_object_identity?    forum.springsource.org

Wildcard IDs in acl_object_identity? Hi, I'm using Acegi as the basis of our security framework on a government project here in Queensland, but pretty soon ran up against (I think) a ...

50. Label-based ACL voter    forum.springsource.org

Since I already have the patch attached (and test cases), should I have opened this JIRA issue with higher priority? It appears I can't change that now. I was hoping this ...

51. ACL Package    forum.springsource.org

ACL Package Hello, I am considering an ACL approach for domain object access control; the argument for this is very compeling (as stated in the reference manual). I am wondering if ...

52. optimizing acl lookup cache?    forum.springsource.org

Hi, I know that Acegi uses a cache to hold acl lookup information for applying authorization rules as configured. Is there a way to fine-tune this cache to allow it to ...

53. set acl entries of aclManager    forum.springsource.org

set acl entries of aclManager Hello, I would like to set the acl entries of the aclManager on a specific domain object. That is, I would like to do the following ...

54. ERROR: invalid reference to FROM-clause entry for table "acl_object_identity"    forum.springsource.org

ERROR: invalid reference to FROM-clause entry for table "acl_object_identity" Hey all, I am trying to get acegi 1.0.3 ACL working with PostgreSQL. I have run into a problem when querying for ...

55. ACL and large set of hierarchical objects    forum.springsource.org

ACL and large set of hierarchical objects Hi All, I similar questions in this forums have been asked over and over again but i couldn't find one that concluded in a ...

56. New ACL module issues / questions    forum.springsource.org

New ACL module issues / questions Hi, Ive been trying out the new ACL module and have found some issues with it in addition to the ones reported in other threads ...

57. Basic Questions About ACL    forum.springsource.org

Basic Questions About ACL Few very basic questions that I have about ACL are as follows: 1. Is ACL only used for business object access control? Can it be used for ...

58. New ACL schema    forum.springsource.org

Hello all, I am new to spring and acegi, currently I am trying to use new ACL module (acls package) but getting stuck with the schema. Does anybody can help me ...

59. acl implementation question    forum.springsource.org

acl implementation question Hi, problem: Secure objects are documents. User is a member of one Organizational Unit, and can have certain role. Each role have several permissions on certain organizational unit ...

60. New ACL schema?    forum.springsource.org

Where can I find the database schema for the new 1.0.3+ version of the acl implementation? I looked at the sample contacts app and didn't find it there. Thanks.

61. More abstract ACL?    forum.springsource.org

More abstract ACL for Class and Field Level Security? First, I want to thank the Acegi team for all the excellent work on this project. I've used it on three projects ...

62. acl error    forum.springsource.org

Feb 11th, 2008, 01:14 PM #1 totoliso View Profile View Forum Posts Private Message Senior Member Join Date Jan 2007 Posts 155 acl error Hi, i need some help with acegi ...

63. Advice on ACL package    forum.springsource.org

Advice on ACL package I am in the process of trying to decide between the old and the new ACL package. The documentation recommends considering the new package if you are ...

64. New ACL Module    forum.springsource.org

New ACL Module Hi, I'm having difficulty getting the contacts sample that ships with Spring Security 2 M1 to use a PostgreSQL DB rather than HSQLDB. I've been hacking away at ...

65. ACL Select statements different Tablenames    forum.springsource.org

ACL Select statements different Tablenames Hi, it seems that the tablenames for the select statements inside the acl package differs. Sometime the tablenames are uppercase, sometimes lowercase. for Windows systems this ...

66. Instance & Method Level ACL    forum.springsource.org

Instance & Method Level ACL I have requirements to be able to secure access down to a very fine-grained level, primarily at a UI (Web) level but ideally as part of ...

67. ACL and Object Identity    forum.springsource.org

ACL and Object Identity Hello everyone, so i am working my way into ACLs. I took the Contacts Application and picked it appart and implemented it into a simple tutorial application. ...

68. Unsupported configuration attributes: [AFTER_ACL_READ]    forum.springsource.org

Unsupported configuration attributes: [AFTER_ACL_READ] Hello everyone, i have an application that i wanted to implment ACLs into. So what i did was looking at the Contacts application and then i wrote ...

69. ACL and custom colums    forum.springsource.org

ACL and custom colums Hello, the spring security thing is a real great framework with good concepts and it will save me a lot of work. I'm really happy that I've ...

70. ACL Filter Performance    forum.springsource.org

ACL Filter Performance Dear Friends, We are using spring security framework in our web application, Where we r using Code: AclEntryAfterInvocationCollectionFilteringProvider But during Filteration it takes much time to filterout that ...

71. Need Pre-Invocation ACL filter on List    forum.springsource.org

Need Pre-Invocation ACL filter on List I have a method which takes a List of object IDs that will be used in a "where" clause. For example: Select * from Customer ...

72. ObjectIdentity / ACL_CLASS question?    forum.springsource.org

ObjectIdentity / ACL_CLASS question? Is there a reason I need to identify the class of an object? I'd like to be able to have different classes representing the same domain object ...

73. Understanding Mask value of Acl Entry    forum.springsource.org

Understanding Mask value of Acl Entry Hello there. I have been struggling for some time to get to grips with the ACL side of Spring Security 2. I am currently trying ...

74. nebwie: ACL object inheritance question    forum.springsource.org

nebwie: ACL object inheritance question since I'm not firm yet with all the phrases and definitions, I'll use an example to explain my questions. * I have a gallery that contains ...

75. Groups and ACL's: correct?    forum.springsource.org

Groups and ACL's: correct? I really had problems with getting the ACL's work for groups with either registered users or anonymous users. And I seemed to be the first because there ...

76. How to implement Dynamic ACL in Spring?    forum.springsource.org

How to implement Dynamic ACL in Spring? Hi All, I want to implement Dynamic Role n ACL in my application,Where admin can give any rights to any role. Role ModuleName permission(ACL) ...

77. HELP! ACL classes/tables with Non Number ID    forum.springsource.org

HELP! ACL classes/tables with Non Number ID Hello, I had posted the same question yesterday. I will appreciate if some one can answer or point me to the right place. Is ...

78. Custom Domain ACL logic?    forum.springsource.org

Custom Domain ACL logic? We have a lot of domain classes, many which already have properties that indicate "ownership" (user ids, account ids, etc), which are persisted with the classes via ...

79. ACL and administrative use    forum.springsource.org

ACL and administrative use Dear all, I'm looking for a way to achieve a seemingly easy task, however I don't see any obvious way to achieve it.. I've got an acl ...

80. ACL after paging problem    forum.springsource.org

81. ACL, nested groups and > 25 million instances    forum.springsource.org

Hi We are developing a pretty large system that will hold about 25 million orders per year and we have a few requirements for our access control system. Each installation will ...

82. Spring ACL for front end validations    forum.springsource.org

I understand that spring acl works at the back end, when the user performs an action the validations are performed and given the appropriate results. My question is if we can ...

83. PermissionEvaluator without ACL    forum.springsource.org

PermissionEvaluator without ACL Is it possible to use @PostFilter and a custom PermissionEvaluator without the ACL system? I tried to Implement my own PermissionEvaluator but my ApplicationContext fails to load with ...

84. ACL inheritance    forum.springsource.org

Hello, I'm implementing a proof of concept using springsecurity. I need to use the inheritance feature of ACLs. I struggle to find a detail documentation on ACL inheritance, and I'm quite ...

85. ACL woes :(    forum.springsource.org

ACL woes :( Hi all, I am new to Spring Security, and am having some trouble with ACLs for domain object security. The basic mechanism is all set up and works ...

86. ACL EL - custom expression support    forum.springsource.org

ACL EL - custom expression support Hi, Is there a good way to make a my own custom expression like "hasCustomPermission()" in ACL EL approach. I try to dig into the ...

87. ACL for groups    forum.springsource.org

It's been almost 6 years since Ben Alex's response to this thread: http://forum.springsource.org/showthread.php?t=13110. Since then, I've seen database schema for groups and group_authorities described in the Spring Security reference, but I've ...

88. resolving ACL class/field issue    forum.springsource.org

89. Basic question regarding ACL    forum.springsource.org

Basic question regarding ACL Hi -- I'm brand new to Spring Security, but have inherited an application that makes extensive use of the RoleHierarchy in order to implement a permission scheme ...

90. ACL: Sid Retrieval Strategy    forum.springsource.org

Hi everyone, I'm having some difficulties with retrieving sids for authenticated user. I looked at code of SidRetrievalStrategyImpl which returns sids based on authentication object, but it is not very clear ...

91. ACL not working    forum.springsource.org

ACL not working hello can someone help me configuring my ACL in spring security 2.0.4? Here is what I've done and it doesn't seem to work: Code:

92. Question on ACL impl in Contacts Sample    forum.springsource.org

Question on ACL impl in Contacts Sample Hello, I think I understand the ACL implementation in the Contacts sample application but I have one question. Why does the ContactDaoSpring class have ...

93. Invoking the http handler explicitly via wicket acl adapter code    forum.springsource.org

Invoking the http handler explicitly via wicket acl adapter code Hi all, We're using Spring security on our data tier, as well as MVC to create REST XML services. We're using ...

94. ACL bitmask not a real bitmask?    forum.springsource.org

From the Spring Security documentation: Finally, ACL_ENTRY stores the individual permissions assigned to each recipient. Columns include a foreign key to the ACL_OBJECT_IDENTITY, the recipient (ie a foreign key to ACL_SID), ...

95. Custom ACL Schema & AclService    forum.springsource.org

Custom ACL Schema & AclService Question 1: Do a lot of users write their own custom acl schema and aclService or is it the case that the default acl schema and ...

96. ACL Implementation    forum.springsource.org

Hi, For ACLs i am now getting the error : [INFO,SQLErrorCodesFactory,http-8080-2] SQLErrorCodes loaded: [DB2, Derby, H2, HSQL, Informix, MS-SQL, MySQL, Oracle, PostgreSQL, Sybase] [DEBUG,SQLErrorCodesFactory,http-8080-2] Looking up default SQLErrorCodes for DataSource [org.springframework.jdbc.datasource.DriverManagerD ...

97. ACL cache warming    forum.springsource.org

ACL cache warming Hi all, I have an application which displays long lists of items. Each item is likely to have different rights. Currently, I am getting the items one by ...

98. ACL - UUID Object identity    forum.springsource.org

ACL - UUID Object identity Hi - I am trying to protect one of my domian object using ACL. We use UUID as PK in our project. Currently ACL implementation expects ...

99. How do I apply ACL to domain objects?    forum.springsource.org

I am trying to secure my domain objects using @PreAuthorize. I can easily check access to objects by using #-references to parameters but how can I check access against the current ...