Security 2 « Security « Spring Q&A





1. spring 3 security vs application server security    forum.springsource.org

spring 3 security vs application server security hello everyone, I'm new to security, we have to activate security on a j2ee application that is deployed on a websphere application server v6.1/7. ...

2. Can't download Spring Security 3.0.6. and Spring Framework 2.5.6.SEC03 ???    forum.springsource.org

Can't download Spring Security 3.0.6. and Spring Framework 2.5.6.SEC03 ??? Can't download Spring Security 3.0.6. and Spring Framework 2.5.6.SEC03 The Spring Security 3.0.6 and Spring Framework 2.5.6.SEC03 downloads do not seem ...

3. security:accesscontrollist not working    forum.springsource.org

HTML Code:

4. How become a member in spring security projet    forum.springsource.org

Hi, I want to contribute in the development of the framework spring security. So I want to know what shall I do, and what are the steps to follow in order ...

5. problems with Spring Security    forum.springsource.org

problems with Spring Security Good afternoon! Personal I have the following problem: I am developing an application using Spring Security and I have the following problem. When I click on the ...

6. Hessian + Security    forum.springsource.org

Hessian + Security Hello, I have a flex application that talks to a spring app which is secured with spring security. Recently I had to create a proxy service, which the ...

7. Release Spring Security 3.1    forum.springsource.org

Hi, Can anyone tell me when Spring Security 3.1 will be released for production ? It's not mentioned on the road map. tnx,

8.  doesn't do anything    forum.springsource.org

doesn't do anything Hi everybody, So I have the following code in my xhtml page that does absolutely nothing ..... button From what I understand the ...

9. Need your help, Spring security    forum.springsource.org

Nov 7th, 2011, 03:30 PM #1 ms_eng50 View Profile View Forum Posts Private Message Junior Member Join Date Nov 2011 Posts 2 Need your help, Spring security Hi all I've a ...





10. Questions about Spring Security 3.1    forum.springsource.org

Questions about Spring Security 3.1 Hello ! i would like to know how to solve this question: we are using Spring-security 3.1 and authenticating the user using database, and so on ...

11. unwanted qury in spring security.    forum.springsource.org

Hi All, I am using spring security. In my web application If I am providing correct credential then everything is working fine. But if wrong credential is entered then the following ...

12. Need to know if Spring security has this support ?    forum.springsource.org

Need to know if Spring security has this support ? Hi All I am a new user to Spring Security. Problem : I have a user being created in a company(Company ...

13. spring security without DelegatingFilterProxy    forum.springsource.org

Hi, I am new to spring security. All the examples that I have gone through use DelegatingFilterProxy, so that spring security sits between user and application. Is it possible to let ...

14. Security and the UI    forum.springsource.org

Security and the UI I'm attempting to develop as clean a solution as possible for securing my UI. In my case this UI is a rich client (spring-richclient/Swing based). I'd like ...

15. Instance based security    forum.springsource.org

Instance based security Hi, I am new to Acegi Security Framework, and I have got basic authentication and role based security working. However, I have a few questions about instance based ...

16. security best practices    forum.springsource.org

Ben, Do you know of any resources to read up on something approaching best practices for enterprise style application? You seem to have a lot of knowledge, and I was hoping ...





17. Advice on implementing security    forum.springsource.org

Advice on implementing security Hi All, I am developing an application at work and have successfully used Acegi for security. The current implementation uses usernames/passwords/roles within the config (xml) files as ...

18. Utilitiy classes for programmatic security    forum.springsource.org

Hi there, at first I wanna say thank you for this very well-designed security framework. It is a pleasure to work with. I'm currently facing the problem, that I have to ...

19. UpgradeAcegi Security System from 0.6.1 to 0.8.3    forum.springsource.org

Sep 20th, 2005, 06:40 AM #1 mannobug View Profile View Forum Posts Private Message Junior Member Join Date Sep 2005 Posts 9 UpgradeAcegi Security System from 0.6.1 to 0.8.3 Hi all ...

20. Newbie in security, plz help!    forum.springsource.org

Newbie in security, plz help! Hi! I've recently started a private project for learning purpose. The application is really a simple online "image viewer". Each user can upload it's images and ...

21. ojbect security interseptor    forum.springsource.org

ojbect security interseptor Hello, can any body explain me how solve follow problem. I am developing web interface/ web service to CMS, but it's difficult to apply security on CMS level, ...

22. Security Architecture    forum.springsource.org

Security Architecture Hi all, I have a plan and would be interested in feedback. My team currently implements security for apps on an adhoc basis. This approach is beginning to become ...

23. Best Practice for working around security issue    forum.springsource.org

Best Practice for working around security issue Forgive me if I've misunderstood something in all this. I was wondering what the best practice is for working around this kind of problem. ...

24. Instance Based Security Checking    forum.springsource.org

Instance Based Security Checking I understand that ACEGI Security supports instance-based security checks via the org.acegisecurity.acl package. I am having a lot of trouble finding any clean examples, however. I basically ...

25. security / component design    forum.springsource.org

I work for a large news company and we're designing an architecture with multiple services like: file transfer, metadata, keyframing, etc. We want these systems to be secure so that not ...

26. My application is made up of 9 wars, how would I implement security over all of them?    forum.springsource.org

My application is made up of 9 .wars, each .war contains a section of the application. Would I have an applicationContext.xml per .war, since each has a web.xml? Or can I ...

27. payload mapping and token security?    forum.springsource.org

payload mapping and token security? Here's perhaps a silly question. I have a webservice that was based on the PayloadRootQNameEndpointMapping. It worked. I then wanted to add a requirement for a ...

28. Help with Security violation    forum.springsource.org

Help with Security violation I'm using Spring 2.0 to try to access remote EJB's but I get a security violation claiming user anonymous although I enter username and password. The same ...

29. How can I register an ApplicationListener that listens to security events    forum.springsource.org

I am a little lost in how I can register an ApplicationListener that listens for the AuthenticationSuccessEvent? I have implemented the ApplicationListener interface (method onApplicationEvent that checks for the AuthenticationSuccessEvent and ...

30. security MBean    forum.springsource.org

security MBean Hi I work with spring 2.0.3 and Websphere 5.1 I created a bean for the configuration of my application My xml is like : --------------------------------------------- ...

31. Spring Security Best Practices    forum.springsource.org

Hi We are developing an internet application by using Spring framework. We are not using Acegi. We'd like to know what are all the Spring security best practices we have to ...

32. Not sure where to put security checks    forum.springsource.org

Not sure where to put security checks Hi folks. I have a web app guarded by Acegi Security. Imagine an AbstractWizardFormController which edits employee data. There is a GET parameter which ...

33. Security issue on WL8.1    forum.springsource.org

Jul 11th, 2007, 02:17 PM #1 lgothard View Profile View Forum Posts Private Message Junior Member Join Date Jul 2007 Posts 22 Security issue on WL8.1 I'm trying to setup plain ...

34. xss4j implementaion for security    forum.springsource.org

Hi, Is there any work being done to implement xss4j for the security of Spring-WS? This is the default used with websphere 6. would be nice to have. rgds Joost

35. problem with file upload,security issue    forum.springsource.org

problem with file upload,security issue Currently I am implement the file upload feature using Spring framework for my web applicaiton. Now I face the security problem. I have two options: 1) ...

36. security: how hide folder for the spring application    forum.springsource.org

this topic can be weird but... i need this, and pls help me i just downlaod a demo software, "magic folders", that consist in hide any folder in windows enviroment ok ...

37. Presentation vs business security    forum.springsource.org

Hi guys, I have just been asked to give a presentation on acegi, and advantages and disadvantages of securing the presentation layer or the business layer. As I couldnt find much ...

38. Question: Security with two or more apps    forum.springsource.org

I'm a newbie with acegi, and my first problem is if Acegi supports the Authentication in a context of multiple webapps (multiple web.xml, because each application uses a web.xml). Example: webApp1.war ...

39. status of spring security 2M1    forum.springsource.org

Hi, we are going to develop new web application and we planned to use acegi for authentication & authorization. We want to use ACL module. Is code under 2M1 ready to ...

40. security about .class information    forum.springsource.org

Hello guys i have a huge doubt, maybe some friendly member can help my friend gave its .war application with all necessary files (.css,.jsp,.class,etc) to its company work, a contract the ...

41. Security Problem    forum.springsource.org

Security Problem I am new to Acegi Security, and I am seeing this issue. When i log in to the application with a valid userid and password, and access a secured ...

42. Spring Security 2    forum.springsource.org

I read last week on Ben Alex's blog that we can expect a new version of Spring Security to be released soon. Is there any update as to when this will ...

43. multiple security mechasims ?    forum.springsource.org

multiple security mechasims ? Hi all, I'm building a spring/acegi web application that will serve two kinds of users. The two kinds of users should login through two different login forms ...

44. Signing from a security device    forum.springsource.org

Hello, First of all, happy new year to all of you ! I need to sign messages on the client side using an external security device (a card reader), which can ...

45. Spring Security for Authorisation Only    forum.springsource.org

Spring Security for Authorisation Only Hi All, I've been wrestling with Spring Security for a few days and figured it might be worth asking on here to see if someone has ...

46. Using PropertyPlaceholderConfigurer with Spring Security 2.0    forum.springsource.org

Using PropertyPlaceholderConfigurer with Spring Security 2.0 Hi, I'm just taking my first steps into Spring Security 2.0 and am having a problem using the Security namespace. I want to be able ...

47. Does Spring Security 2.0 work with BeanFactoryPostProcessors?    forum.springsource.org

When I use the PropertyPlaceholderConfigurer, the variables are not being resolved when beans are being accessed by the Security namespace. Anyone got any ideas of what may be going on?

48. spring security 2.0 problem    forum.springsource.org

Apr 21st, 2008, 09:34 AM #1 kace View Profile View Forum Posts Private Message Junior Member Join Date Apr 2008 Posts 18 spring security 2.0 problem Hi guys, I upgraded my ...

49. Spring Security 2.0's LdapAuthenticationProvider    forum.springsource.org

Spring Security 2.0's LdapAuthenticationProvider The Acegi Security method in LdapAuthenticationProvider, createUserDetails (returning a UserDetails object), is not in the 2.0's version. I used this by extending the class and overriding the ...

50. LogoutHandler with Spring Security 2.0    forum.springsource.org

Hi, I do understand I need a custom LogoutHandler plugged into LogoutFilter to do custom database work on user logout. My question is, how do I set it up using the ...

51. Where is the Spring Security ACLS DDL?    forum.springsource.org

52. Domai object instance security    forum.springsource.org

Dear Friends , I am using spring security frame work for our application. and i m facing a problem which is related to instance level security. i downloaded the example of ...

53. OWASP TOP 10 - Security Vulnerabilities    forum.springsource.org

OWASP TOP 10 - Security Vulnerabilities I posted this back in Feb and got no response. Has anyone had any experience using the HDIV package within Spring? Are there any plans ...

54. security configuration problem    forum.springsource.org

security configuration problem I am trying to implement Spring Security 2.0 using MyEclipse 6.01GA I have this in my applicaitonContext.xml (removed "www" for forum) :

55. Spring Security and I.E.'s reauth on POST    forum.springsource.org

Spring Security and I.E.'s reauth on POST Hi all, I am using Spring Security for a current project that allows a hybrid authentication environment - NTLM is the preferred default, but ...

56. Spring Security Issue    forum.springsource.org

Spring Security Issue I am trying to use spring security 2.0.1 and for this I have written a unit test for testing Method based security. The snippet of my code is: ...

57. AcegiPlainTextPasswordValidationCallbackHandler and Spring security 2.0.2    forum.springsource.org

AcegiPlainTextPasswordValidationCallbackHandler and Spring security 2.0.2 Hi, I am starting to play with Spring security 2.0.2 and want to enable plain text password validation in Spring-ws 1.5.2. One possible solution would be ...

58. Spring DM and Spring Security    forum.springsource.org

Jul 7th, 2008, 06:09 PM #1 jpaek View Profile View Forum Posts Private Message Junior Member Join Date Jul 2008 Posts 6 Spring DM and Spring Security Can Spring DM and ...

59. localization in Spring Security once again    forum.springsource.org

localization in Spring Security once again Hi, I find localization in Spring Security very unclear and problematic. After many hours of tries I've decided to implement localization in spring-security-samples-contacts-2.0.3 application for ...

60. Spring Security makes SJSAS 8.1 (Enterprise) hang    forum.springsource.org

Jul 10th, 2008, 03:54 AM #1 juanignaciosl View Profile View Forum Posts Private Message Junior Member Join Date Apr 2007 Posts 14 Spring Security makes SJSAS 8.1 (Enterprise) hang Hello, I'm ...

61. Marshaller+security    forum.springsource.org

Hi all, I am doing web services with Spring WS 1.5, Spring 2.5 and maven. I am using marshaller (jabx), also I am doing a client that it is used by ...

62. Spring Security and ExtJS    forum.springsource.org

Spring Security and ExtJS Are there any examples of integrating ExtJS with Acegi. More specifically, I have an extJS login form that sends the j_username and j_password to the server and ...

63. Spring 2.5.5 and Spring Security?    forum.springsource.org

Given that Spring Security is built against Spring 2.0.8, has anyone had any problems mixing libraries? Or is it pretty much, "you're screwed, use 2.0.8?" -David

64. spring security 2.0.3 / Spring 2.5.1    forum.springsource.org

spring security 2.0.3 / Spring 2.5.1 Hi, i use grails 1.0.1 wich work on spring 2.5.1. when i configure my application to use spring security 2.0.3 i got message error on ...

65. New to Spring Security    forum.springsource.org

New to Spring Security Actually I'm new to the entire Java world, although I've been coding for 8 years now... but the project I've been transferred to at work is using ...

66. Strut2 with Spring Security    forum.springsource.org

Hello Neo, to integrate struts2 with spring security frame work our application context looks like : Code:

67. Is Spring Security stable?    forum.springsource.org

Is the spring security is stable to use in live project (banking domain) since it is go on changing i'm little bit worried and afraid.

68. Spring Security Without Spring ?    forum.springsource.org

Spring Security Without Spring ? Being a newbie in the spring security world, i was wondering if it was possible to use spring security to secure an application not spring based ...

69. Please help Spring Security newbie question    forum.springsource.org

Oct 17th, 2008, 03:24 AM #1 bornleo26 View Profile View Forum Posts Private Message Visit Homepage Senior Member Join Date Jul 2007 Location Faridabad India Posts 138 Please help Spring Security ...

70. simple security    forum.springsource.org

simple security Hi, I would like to create a basic security model, in which users can login and When a user is logged in, I want to somehow save this logged ...

71. Security Newbie    forum.springsource.org

Security Newbie I'm not able to get the login page. I'm getting the following: The requested resource (/securitytest/login.jsp) is not available. I have defined under WEB-INF. What am I doing wrong? ...

72. Please help Spring Security configuration issue    forum.springsource.org

Oct 23rd, 2008, 02:11 PM #1 bornleo26 View Profile View Forum Posts Private Message Visit Homepage Senior Member Join Date Jul 2007 Location Faridabad India Posts 138 Please help Spring Security ...

73. Spring Security Jars    forum.springsource.org

Spring Security Jars I'm extremely new to Spring Security and can't seem to figure out which jar files are required to get it up and running. I'm using Netbeans, which by ...

74. Need to know if Spring Security can do this    forum.springsource.org

Need to know if Spring Security can do this We have an inhouse written security system that does something which I will describe. I have been asked to recommend whether it ...

75. Help required in getting started for spring security.....    forum.springsource.org

Help required in getting started for spring security..... Hello All. i am a beginer in spring security. is there any step by step tutorial available on spring security which can guide ...

76. Bypassing SimpleUrlHandlerMapping for Spring Security    forum.springsource.org

Bypassing SimpleUrlHandlerMapping for Spring Security I'm trying to add a form login for Spring Security to an existing app using SimpleUrlHandlerMapping. I have login form as follows: Code:

77. Comparison of Bitkoo features to Spring Security features    forum.springsource.org

I am trying to learn the features of bitkoo and also the features of spring security so that I can compare and contrast them in a presentation. The 6 shorts PDFs ...

78. Spring DM and Spring Security ?    forum.springsource.org

hello all, I have running spring DM and Equinox and want to integrate spring security. So my question is => Is this generally a good idea, or isn't it possible at ...

79. Security at Business Layer    forum.springsource.org

Hi All, My application contains Dao Layer, a Business Layer, a "Web Layer (JSP)" and a "SOA Layer". Both SOA and Web access to the business layer. So I want to ...

80. Spring Security Localization    forum.springsource.org

Spring Security Localization I'm having difficulty getting the Spring Security messages to display in the user's locale. Localization works successfully for all other messages in my system, but for some reason ...

81. Propagating Security across apps    forum.springsource.org

Propagating Security across apps All, Apologies for a similar posting but I cannot find too much information about how to accomplish the following (and whether it is possible at all).... Is ...

82. Spring IDE Security Extension    forum.springsource.org

Hi SS Team!!! I have curious about a feature in Spring IDE, I did install Spring IDE in eclipse and I did see an extension: Security Extension... How can I use ...

83. j_security_check override    forum.springsource.org

Hello I need to override the j_security_check action, with my own custom action. Can someone tell me what is done in the original spring security j_security_check class? So I can reproduce ...

84. who can help me about spring security?    forum.springsource.org

Hi,everyone i want to implements this kind of function base on web project 1. only one session permit 2. when a user logout ,he can't visit the page which need login ...

85. Basic Spring Security Configuration    forum.springsource.org

Dec 27th, 2008, 01:18 AM #1 naruponk View Profile View Forum Posts Private Message Visit Homepage Junior Member Join Date Dec 2008 Posts 29 Basic Spring Security Configuration Hi, I'm newbie, ...

86. Fundamental security-noob questions    forum.springsource.org

Fundamental security-noob questions I'm attempting to secure my web app using spring security. I'm securing it down at the service layer where I expose a few objects in an application-context.xml file ...

87. Does any one know where this class lives, I cant find it in Spring-security-core2.0.4    forum.springsource.org

Jan 7th, 2009, 02:34 PM #1 tseckend@yahoo.com View Profile View Forum Posts Private Message Junior Member Join Date Jan 2009 Posts 2 Does any one know where this class lives, I ...

88. Unittest + Security    forum.springsource.org

Unittest + Security Hi, Im new to Spring Security and just wondering, whats the best way to unittest my security configuration. I've set up a pre-authenticated scenario with spring security. I ...

89. Spring Security for Spring 2.5.1?    forum.springsource.org

I have an application that depends on the Axis2-Spring integration (1.4.1). This results in a transient dependency on Spring 2.5.1. Trying to mix in other versions of Spring causes NoSuchMethodErrors when ...

90. reimplementing trivial security    forum.springsource.org

reimplementing trivial security I'm rewriting a web app that was written in php. Its authentication consists of a start page with a form with a drop down select list where you ...

91. Spring Security 2.0.x on J2EE 1.3 w/ JDK 1.4.2    forum.springsource.org

Your site and documentation indicates Spring Security 2.0.4 requires JDK 1.4.2, which my system runs. However, it runs Servlet 2.3 as I'm on WAS 5.1.1.17. Unfortunately, it appears that Spring Security ...

92. New bie to Spring Security    forum.springsource.org

Hi i am a new bie to Spring security and can any one please help me out where to start.. Can you share good tutorials ,websites and books which can help ...

93. spring security : shared security    forum.springsource.org

94. After adding spring security, Webwork file upload does not work anymore.    forum.springsource.org

Hey everybody, I'll make this short and simple, When we introduced spring security into our web application, spring brought along some of his friends (FilterChain), which is fine, except that it ...

95. Mixed security    forum.springsource.org

Hi, I'm a beginner at Spring Security. I'd like to know if it is possible to mix two different sources for authentication and authorization, e.g., autheticate the principal against an LDAP ...

96. Need advice about dynamic security management    forum.springsource.org

Need advice about dynamic security management Hi all, Instead of keeping roles and access rights in the XML configuration file, a have a couple tables in the database where I store ...

97. Ease of maintenance of security data    forum.springsource.org

Ease of maintenance of security data We have a security design which provides access to elements of an application by use of permissions against those objects. Roles are then used to ...

98. Complete separation of Security layer    forum.springsource.org

Complete separation of Security layer Hi, I am new to this Acegi security framework. I want use Acegi security in Security module, where I'll do only Authentication and Autherization tasks and ...

99. Custom Message in Spring Security    forum.springsource.org

Hi guys, I am using spring security for authentication and to provide security for my web application. I want to customize login error messages. For example, instead of displaying "Bad Credentials", ...

100. Which FactoryBean i shell use to provide local application security    forum.springsource.org

Which FactoryBean i shell use to provide local application security Hi, I want to keep Acegi Security under one module (say SecurityModule) For RMI - RMIProxyFactoryBean get Instantiated. For HTTP request ...