1. spring-security: authorization without authentication stackoverflow.comI'm trying to integrate Spring Security in my web application. It seems pretty easy to do as long as you integrate the whole process of authentication and authorization. However, both authentication ... |
2. Roles/Priviledges in a Spring/Hibernate application stackoverflow.comIn a banking or similar application there are usually several roles defined and associated privileges required (for example a normal user could only do transactions but not post it while a ... |
3. authorization stringtemplate stackoverflow.comit doesn`t working web.xml
|
4. spring authorization stackoverflow.comI have some problems with authorization. I don't want to use Spring Security, just simple authorization form (with two fields: UserName, Password and submit button). Then user can work with application ... |
5. Criteria based authorization check with spring security? stackoverflow.comHow does spring security support dynamic role & permission? For example, the role can be generated at runtime by end users. Each role can include multiple permissions which can be created/updated ... |
6. Defining Spring Security user roles stackoverflow.comI am going to design an application which authenticates user from another application . Basically my application is going to get only if the user is authenticated (true or false) and ... |
7. Using InMemoryDaoImpl in spring security stackoverflow.comI am trying to implement custom filter , authentication provider to authenticate users directly from requests . However I am getting the following the exception .
|
8. Spring Security: User Authorization in Java Class stackoverflow.comDoes Spring Security provide any way to authorize a user in java class, the way it provides tags for authorization in JSPs (such as |
9. Authorization for objects in J2EE stackoverflow.comMy web application requires access control to the content that is displayed to users. All users may be accessing the same page but the content shown will depend on their ... |
10. Spring 3.0 Security - Authorization with Authentication stackoverflow.comI am new to Spring and my requirement is that I do not want to authenticate the user with username and password. The user is authenticate is some other application and my ... |
11. Spring MVC custom authentication and authorization stackoverflow.comThe problem: |
12. Simple AuthN AuthZ Spring Security Error stackoverflow.comI am following spring security reference documentation. I put that lines into a file under WEB-INF called security-app-context.xml
|
13. Shiro Spring JDBCRealm Authentication and Authorization stackoverflow.comIdeaI need to develop a web application using Spring MVC with Shiro as Security Framework.RequirementsThe usernames, passwords, roles etc to be stored in a database. Database Schema:
|
14. Basic than the Basic-est question on Spring Security? stackoverflow.comI have an extremely basic question about Spring security, however this question may be generalized to any Authorization scheme: Should a Group have a single authority and a user may be a ... |
15. Java Desktop Application and Functionality Autherization stackoverflow.comI'm fairly new to java development and I have found myself tasked with implementing a functionality authorization system for a desktop application written in java. Currently the application requires user authentication ... |
16. Spring security group based authorization stackoverflow.comi intend to make group based permission scheme but i am confused about the following: i have some questions:
|
17. Spring Security Pre-authentication without authorization stackoverflow.comI am trying to implement pre-authentication scenario and I am running into few issues.. This is my security context file..
|
18. Spring Security 3.0 User Details based authorization stackoverflow.comI have a spring security based application with a custom user details object. this object includes things like age, height, weight, etc. There are some methods (such as rideScaryRollerCoaster()) ... |
19. Leverage Spring security for accessing Bitkoo stackoverflow.comI am trying to come up with a design where secure objects (urls, web elements & method invocations) are protected with Bitkoo keystone product. The scenario is, Keystone admin will configure all ... |
20. authentication and authorization tables customization forum.springsource.orgauthentication and authorization tables customization greeting all. im novice to spring security. when i start to learn spring security i inducted that spring security performing some of thing automatically for us ... |
21. Programmatic Authorization forum.springsource.orgProgrammatic Authorization I'm using the AuthenticationProcessingFilter to do request level authentification and it works fine. I have a use case however that basically says that after a user has "signed up" ... |
22. Dynamic Authorization forum.springsource.orgDynamic Authorization Hi, Is it possible to make ROLE-METHOD mapping in a database table... For example: |
23. HandlerInterceptorAdapter for user authorization? forum.springsource.orgHandlerInterceptorAdapter for user authorization? User authorization in my [annotation based] Spring MVC application depends on a many-to-many relationship between user roles and user functions (all DB driven). Once the user logs ... |
24. Authorization fails when using GBAC in spring security 3.0 forum.springsource.orgAuthorization fails when using GBAC in spring security 3.0 I am working with CAS integration with my web application with Spring security 3.0 framework.I created a secured page which will be ... |
25. Authorization/RBAC Design Advice forum.springsource.orgAuthorization/RBAC Design Advice I have the following scenario: Company C with Hierarchical Departments (each department can contain administratively subordinate departments) Any manager should be able to generate aggregated reports for his ... |
26. Authorization: basic question forum.springsource.orgAuthorization: basic question Hi All, I have a pretty basic question. But it sure beats me. There are four levels of privileges in the application. 1. Company head (Can do anything ... |
27. Customized Authorization in spring security 3.0.5 forum.springsource.orgCustomized Authorization in spring security 3.0.5 Hi Guys, I have implemented authentication using spring. But my authentication is done by implmenting AuthenticationProvider Below is the configuration for the same. |
28. Authorization not working correctly in Spring security 3 forum.springsource.orgAuthorization not working correctly in Spring security 3 Hi Guys, I need to authenticate and authorize a user. I need to do authentication and authorization using database values. I was able ... |
29. Spring Authorization forum.springsource.orgHi Please give me a clarification for the below Spring Security 3.0 configuration. My understanding is that the action of checking if the user has the 'SPECIFIED_ROLE' happens only after the ... |
30. Spring Security Pre-authentication without authorization forum.springsource.orgSpring Security Pre-authentication without authorization I am trying to implement pre-authentication scenario and I am running into few issues.. This is my security context file.. Code: |
31. What if I have to collect authorization data after authent? forum.springsource.orgI already use FilterInvocationInterceptor but would like to collect extra information from an authenticated user before poroceeding the authorization. What's the best approach? Thanks Mauricio |
32. Mapping Authorization Scheme to Acegi forum.springsource.orgMapping Authorization Scheme to Acegi I'm trying to get a feel for who the authorization scheme I am working to implement would map to Acegi. Basically, what is there for free, ... |
33. Is it possible to use Spring with the existing authorization forum.springsource.orgIs it possible to use Spring with the existing authorization I am new to Spring Framework. I could not find a solution to incorporate the existed authorization and authentication framework to ... |
34. Attribute based authorization forum.springsource.orgHi, I'd like to make my authorization decisions based on some attributes of an object. For example I have a Document object and it has a 'status' attribute. I'd like to ... |
35. Dropping authorization on Session expired forum.springsource.orgI assume you're using CAS? Normal Acegi form authentication should expire when the session goes away. With CAS maybe remove the cookie that Acegi looks for to match browser with secure ... |
36. Account based role for authorization. forum.springsource.orgDear all, My user have access to many accounts and have different access role for different accounts like viewer for one account and loan approval for another account. is it possible ... |
37. Is my approach right for authorization but not authentication forum.springsource.orgOct 24th, 2005, 05:43 AM #1 sachinnigam Guest Is my approach right for authorization but not authentication Hello everyone, Using Acegi i need only authorization and not authentication as authentication will ... |
38. I18n messages arent displayed when authorization fails forum.springsource.orghey guys i have problem here when the user is authorized to view a page every things works fine (and i18n too)but when he is not authorize to view the page ... |
39. I have problems with authorization forum.springsource.orgI have problems with authorization I have 2 Problems: 1-I want that only the ROLE_USER has access to the page having the address pwdChange.do so, I have declared it in the ... |
40. problems with authorization forum.springsource.orgproblems with authorization I have 2 Problems: 1-I want that only the ROLE_USER has access to the page having the address pwdChange.do so, I have declared it in the objectDefinitionSource but ... |
41. Authentication , Authorization customised schema ?? forum.springsource.orgNov 15th, 2005, 11:47 PM #1 lingan View Profile View Forum Posts Private Message Junior Member Join Date Nov 2005 Posts 15 Authentication , Authorization customised schema ?? Hi All , ... |
42. WebDAV home folders authorization forum.springsource.orgWebDAV home folders authorization Hello dear forum members. I'm wondering what is the best way to secure access to WebDAV server to provide functionality similar to user "home" folders, that is, ... |
43. Need custom authorization failure page forum.springsource.orgNeed custom authorization failure page Hi, I need to show a custom authorization failure page to users in cases where user is successfully authenticated but does not have privileges to view ... |
44. custom authorization forum.springsource.orgcustom authorization Hi all! Hope someone could enlight me in the interface djungle ! Probably a very simple question. In short, Im devloping a webapplication and I want my login to ... |
45. Approach to groupware authorization forum.springsource.orgApproach to groupware authorization I'm currently working on a groupware web-application, that will be shared between multiple user groups. You could see it as an online service. Suppose you have the ... |
46. Using different providers for authentication and authorization forum.springsource.orgUsing different providers for authentication and authorization I'm new to Acegi, so if this is an easy question, just give me some direction as to where I might find the answer. ... |
47. Standalone authorization feature in acegi forum.springsource.orgYes, and a lot of people do this. All you need is ensure the SecurityContextHolder.getContext().setAuthenticati on(Authentication) is setup. You'll generally construct an Authentication from whatever your existing authentication system provides. |
48. Role based Authorization forum.springsource.orgRole based Authorization Hi I am using the following FilterSecurityInterceptor in applicationContext.xml |
49. Acegi only for Authorization forum.springsource.orgAcegi only for Authorization I have a situation where I am required to use ACEGI only for Authorization. X509s are used for Authentication on Oracle Application Server. After authentication, the server ... |
50. Acegi For Authorization only forum.springsource.orgI want to use Acegi for authorization only.After going throught the documents i used the following and set the Authentication using the following:- SecurityContextHolder.getContext().setAuthenticati on(auth); auth is instance of a class ... |
51. can acegi support object authorization inheritance? forum.springsource.orgcan acegi support object authorization inheritance? Hi there, I'm researching Acegi for my authorization needs in my Spring/Hibernate/Tapestry application. From reading the documentation and samples so far, I'm not sure whether ... |
52. Authentication, Authorization forum.springsource.orgAuthentication, Authorization Hello, I am creating a web app, which is publically available. But there is an admin section within the app, that I need to ensure only "valid" users are ... |
53. Is Responsibility-based authorization possible? forum.springsource.orgIs Responsibility-based authorization possible? I'm still doing some research on how to use Acegi but the most pressing concern I have on whether to use Acegi is the authorization mechanism. From ... |
54. How to enforce authorization forum.springsource.orgHow to enforce authorization I have a need to ensure that users accessing my web application for the first time have accepted the terms and conditions, i.e. once a user has ... |
55. Programmatic authorization forum.springsource.orgHello, Is there a classical solution to make programmatic authorization checks instead of declarative checks (similar to J2EE programmatic check as isUserInRole) ? Sample API I would imagine : Code: public ... |
56. Custom authorization - 0.8.2 to 0.9 upgrade woes forum.springsource.orgCustom authorization - 0.8.2 to 0.9 upgrade woes Hi We have a Spring application that uses customised authorization to integrate with our corporate user database using acegi 0.8.2. Here's the changed ... |
57. Authentication/Authorization in SRC forum.springsource.orgAuthentication/Authorization in SRC Hi everybody, i'm developing a SRC application and i need to manage authentication/authorization. At now i manage to login to app as "admin" role, using the same strategy ... |
58. Spring MVC and Authorization forum.springsource.orgSpring MVC and Authorization I am thinking of using the Spring MVC as a framework for a new web app I am developing. A major aspect of the web app is ... |
59. best way to implement community-like authorization with acegi forum.springsource.orgI am trying to implement an authorization mechanism like typical community, where we have many community and user can be part of more than one communities and play a different role ... |
60. Custom Authorization Using Acegi forum.springsource.orgCustom Authorization Using Acegi All, I have read numerous posts on this forum and have found them fairly helpful. The requirements of my client dictate the following flow of events for ... |
61. ActiveDirectory Authorization fails forum.springsource.orgApr 16th, 2007, 10:26 AM #1 Rapthor View Profile View Forum Posts Private Message Member Join Date Mar 2006 Posts 85 ActiveDirectory Authorization fails Hi, I am absolutely new to Active ... |
62. Authentication and not Authorization forum.springsource.orgHi , In my application, i want to use only Authentication functionality of Acegi and not Authorization functionality. Is it possible ? If yes , how ? Specific requirements are like ... |
63. Authentication works, but Authorization not... Why? forum.springsource.orgHello, I'm trying to use acegi with AD Server, the authentication is working well, but the authorization failure. I'm not a developer, so I can modify xml files only. Attached is ... |
64. Trying to understand acegi authorization forum.springsource.orgTrying to understand acegi authorization N00B here. I am in the process of getting custom authentication done using Acegi. As a next step I have to authorize users against resources used. ... |
65. multiple role authorization forum.springsource.orgmultiple role authorization Hi, I am a newbie to this, trying get a understanding of ACEGI features. I am trying to authorize multiple roles on protected resources in my sample application ... |
66. J2EE Container Authentication, Acegi Authorization - Design review forum.springsource.orgJ2EE Container Authentication, Acegi Authorization - Design review In our organization it is mandatory to use J2EE container-managed authentication. E.g. the container is responsible for authenticating the user and determining the ... |
67. Authorization using Another Dao to access roles forum.springsource.orgAuthorization using Another Dao to access roles Hi, My requirement is to access a custome dao to access roles and configure it acegi security. Example: a existing dao that access a ... |
68. Authorization using ACEGI forum.springsource.orgAuthorization using ACEGI Hi , I am a newbee to acegi security system.I have to implement "authorization" alone using acegi.Authentication is bieng done by some other application. How should I go ... |
69. Dynamic Authentication + Authorization forum.springsource.orgDynamic Authentication + Authorization Hello fellow developers, I've been studying ACEGI for quite a while now and I'm still not sure what to do. I believe you all know what I'm ... |
70. Regarding correct authorization approach forum.springsource.orgRegarding correct authorization approach Hello, After reading a lot the reference guide and digging through the samples, I'm still without a paddle. Here's another mirabulous request made by the top dogs: ... |
71. Which is the suggested Authorization mechanism for this application? forum.springsource.orgWhich is the suggested Authorization mechanism for this application? Hello folks, So I've been trying and trying and, as I've seen so many people mention at other topics, "I've been pulling ... |
72. Acegi Authorization mit existing Authenticationsystem forum.springsource.org |
73. Authorization inside the code, basic questions forum.springsource.orgAuthorization inside the code, basic questions I am starting to take Acegi into use, and some pretty basic questions: 1) A common case is that you have a HTML page which ... |
74. Change Authorization Dynamically forum.springsource.orgChange Authorization Dynamically Hi, I have an application which uses spring and acegi.I want to have access this application with a particular user name along with a special password (This is ... |
75. No authorization forum.springsource.orgNo authorization Things go like this. Am using struts to define *.do For example welcome.do is defined value="/WEB-INF/jsp/welcome.jsp" All my pages are in WEB-INF/jsp What I want is the all user ... |
76. authentication without authorization. forum.springsource.orgHi is their a way to specify a page requires authentication (a successful authenticated object), not authorization. If yes how do you set it up. I mean a user can have ... |
77. Required only Acegi authentication but not authorization forum.springsource.orgIn my spring based web application I need only authentication but not authorization. So I configured only x509ProcessingFilter but not FilterSecurityInterceptor. Is this the right way to meet my requirements? Also ... |
78. Programmatic authorization checks forum.springsource.orgProgrammatic authorization checks Hello all, Our previous home-made security framework supported programmatic authorization checks using calls similar to the following: boolean SecurityManager.isUserInRole(Role1); boolean SecurityManager.canAccess(command1) void SecurityManager.checkAccess(command1) throws AccessDeniedException; Here, a command ... |
79. Authorization only NO Authentication forum.springsource.orgIs it possible to use spring security for only Authorization with LDAP and not the authentication. I am using different method for authentication. Successful authentication returns distinguished name and i want ... |
80. Form Authorization doesnt work with POST forum.springsource.orgForm authentication should work with POST. Indeed the spring-security-samples-tutorial has a login.jsp which shows this (extract): Code: |