acl « Security « Spring Q&A





1. Group and acl on Spring Security    stackoverflow.com

I want to use Spring Security to manage user, group and permissions. I want to use ACL to secure my domain objects but I can't find a way to assign a group ...

2. How to connect ACLs with protected resources?    stackoverflow.com

What is the best way to connect an ACL with the protected resource? 1) Should the protected resource hold a reference to its ACL?

interface AclHolder {
    Acl getAcl();
}
This ...

3. implement acl on field in spring security    stackoverflow.com

I would like implement spring acl for my object fields. does anyone has an idea what do i have to implment for it? for example, i have Purchase object. i would like admin_role to ...

4. Spring Security - is Role and ACL security overkill?    stackoverflow.com

I have a 3 tier application that requires security authorizations be placed on various domain objects. Whether I use Spring's ACL implementation or roll my own, it seems to me ...

5. Is Spring ACL a good ACL implementation?    stackoverflow.com

I have read about Spring ACL but it does not seem to be very competent. For example: 1) No way to list all objects of type X with permission Y 2) No way ...

6. Spring ACL Voters configuration    stackoverflow.com

So I have tried to implement a simple ACL example in my project and everything works as it should. I have the following configuration:

<property name="decisionVoters">

    <list>

   ...

7. Spring ACL questions    stackoverflow.com

I am using the new Spring Security 3.1 and have a few questions to Spring Security ACL.

  1. So let's say I have an object and want to define an ACL for it. ...

8. Can Spring Security ACL "cut" results of a query or a find via Criteria?    stackoverflow.com

Today I read a bit about Spring Security ACL technology. I wonder if it is possible to use it to "cut" the result of a NamedQuery or a Criteria generated query ...

9. How to change the Permisions in Spring Security ACL?    stackoverflow.com

I want to extend the permissions given for an user to an entity. I am able to create ACLs via MutableAclService.

MutableAcl acl = this.mutableAclService.createAcl(new ObjectIdentityImpl(entity));        ...





10. Why does a spring-security ACL have an identifier?    stackoverflow.com

I'm trying to set up our custom version of spring-security but I can't quite understand why an ACL has an identifier that is even supposed to be a primary key if, ...

11. Spring role-based authorization VS ACL?    stackoverflow.com

i just want to know the difference between using ACL and spring role-based authorization in spring security 3 ?

12. spring security acl 3.0.5: Unable to locate a matching ACE for existing authority.    forum.springsource.org

spring security acl 3.0.5: Unable to locate a matching ACE for existing authority. Code: rg.springframework.security.acls.model.NotFoundException: Unable to locate a matching ACE for passed permissions and SIDs at org.springframework.security.acls.domain.AclImpl.isGranted(AclImpl.ja a:266) at org.springframework.security.acls.domain.AclAuthorizationStrategyImpl ...

13. Acegi ACL    forum.springsource.org

Hello all, I'm currently trying to secure access to my objects according to ACLs per object. The one problem I have, is I can not see where to define which methods ...

14. How Does ACL Security Really Work?    forum.springsource.org

How Does ACL Security Really Work? I've read several tutorials and books on Spring ACL security and am still having trouble getting my head round it. I prefer to learn fundamentals ...

15. Spring Security 3 ACL and groups?    forum.springsource.org

Spring Security 3 ACL and groups? I've been reading the excellent Spring 3 security book, and have a question over how to implement ACL based authorization. From the book it's clear ...

16. Instance-Based ACL Security    forum.springsource.org

Instance-Based ACL Security I'm quite lost on how to do the instance based ACL, even after reading the docs and API. Here is my scenario: I am creating a user admin ...





17. Currently The Spring Security 3 ACL module can used in product environment?    forum.springsource.org

I can say that there are those that use ACL model in production and it is intended to be used in production environments. However, I don't think anyone can say definitively ...

18. Spring security Users, Groups, ACL    forum.springsource.org

Hi I'm interested if Spring Security covers urganizing users into groups? Can I have permissions for the group and for the user? Can I restrict access to some record like in ...

19. help on acegi's ACL. I can't well understand with sample.    forum.springsource.org

help on acegi's ACL. I can't well understand with sample. How does it return the owner's recoder? Code: dianne's Contacts id Name Email 4 Karen Sutherland karen@sutherland.com Del Admin Permission 5 ...

20. Acegi ACL    forum.springsource.org

I'd like know how Acegi ACL can achieve the following senario: I have a Document object which consists of many pages. How can I define/configure ACL so that certain users can ...

21. ACL based security    forum.springsource.org

ACL based security I'm looking into the Acegi Security framework the last two days and thanks to the Spring in Action book, everything seems very clear to me. But I was ...

22. Non-ACL AfterInvocation security    forum.springsource.org

Non-ACL AfterInvocation security OK.... after further thought and no responses For the Short question... goto 2nd post... for the longer (original) version, read-on: [Long Version] I have method level security working... ...

23. ACL-based security for existing (non-Spring) apps    forum.springsource.org

ACL-based security for existing (non-Spring) apps Hello! First of all, I would like to mention that Acegi Security is great I have recently started to explore it and I like it. ...

24. After ACL Read Authorization    forum.springsource.org

After ACL Read Authorization I'm attempting to secure my domain objects com.shawmut.model.ui.MenuItem but i'm getting this error seen below. I have secured my service method like so: com.shawmut.service.ui.menu.MenuManager.getMenuIte m=ROLE_USER,AFTER_ACL_READ I'm specifically ...

25. Question about Users/Roles and ACL    forum.springsource.org

Question about Users/Roles and ACL Hi, I have been reading a lot for the last couple of days about how Acegi Security supports authorization using users, authorities and ACLs. Some of ...

26. ACL List multiple roles    forum.springsource.org

ACL List multiple roles Hello, I am refining a previous question I posted b/c I realized how ridiculous the last question was. So, I have 10 car dealerships whose inventory is ...

27. Acegi security ACL + hibernate    forum.springsource.org

Hello, I need to integrate ACL security with hibernate. My customer wants to be able to change property level permissions based on a ROLE. For Example he wants only ROLE_ADMIN to ...

28. Acegi new ACL feature    forum.springsource.org

For our current project I'm trying to get some insight in the new Acegi ACL feature (it should be an improvement over the old one). However I'm having difficulty in grasping ...

29. ACL vs ROLE decision    forum.springsource.org

I have a web application that implements a service frontend. with many qury services exposed to many users. To understand the size of the application we can suppose a number of ...

30. ACL vs ROLE question    forum.springsource.org

I have a web application that implements a service frontend. with many qury services exposed to many users. To understand the size of the application we can suppose a number of ...

31. What level to apply ACL security at?    forum.springsource.org

What level to apply ACL security at? Hi, We are using role based security with role voter on the service layer methods. We are also looking at using ACL security. Originally ...

32. Acegi ACL Issue    forum.springsource.org

Jun 7th, 2007, 03:03 AM #1 deepak.kalra@gmail.com View Profile View Forum Posts Private Message Junior Member Join Date Dec 2006 Posts 21 Acegi ACL Issue I am trying to implement domain ...

33. ACL, the obscure part of ACEGI    forum.springsource.org

ACL, the obscure part of ACEGI When I see this kind of request in BasicLookupStrategy.java : select ACL_OBJECT_IDENTITY.OBJECT_ID_IDENTITY, ACL_ENTRY.ACE_ORDER, ACL_OBJECT_IDENTITY.ID as ACL_ID, ACL_OBJECT_IDENTITY.PARENT_OBJECT, ACL_OBJECT_IDENTITY,ENTRIES_INHERITING, ACL_ENTRY.ID as ACE_ID, ACL_ENTRY.MASK, ACL_ENTRY.GRANTING, ACL_ENTRY.AUDIT_SUCCESS, ACL_ENTRY.AUDIT_FAILURE, ...

34. Acegi ACL question    forum.springsource.org

Acegi ACL question I'm new to acegi so please forgive the ignorance. The contact example uses username as the recipient. I'm trying to use role id as the recipient for example ...

35. ACL Security -> In-Momory    forum.springsource.org

ACL Security -> In-Momory Hello everyone, So i read in ->dbinit.txt on the acegi site that its possible to implement IN-Memory ACL. I deployed the Contacts Application and i am trying ...

36. spring-security-acl 2.0.x module    forum.springsource.org

Aug 27th, 2008, 08:56 AM #1 cornflakes View Profile View Forum Posts Private Message Member Join Date Jan 2005 Posts 55 spring-security-acl 2.0.x module Hello, I have just recently upgraded from ...

37. ACL Users and Goups    forum.springsource.org

Dear all, Is there a way to manage ACLs in termes of Groups instead of Users ? I easily see a possibility to take Spring Security users for groups and implement ...

38. spring security acl questions.    forum.springsource.org

well this protect my domain? If not exactly how should i mark acl pattern.

39. Feedback on Spring Security ACL    forum.springsource.org

Feedback on Spring Security ACL We managed to get Spring Security working, using a lot if its capabilities. Our experience is that Spring Security is quite good from a conceptual point ...

40. Hibernate implementation of Spring Security ACL    forum.springsource.org

Hi Luke: Sorry , my english is poor. You misunderstood what I mean. I absolutely believe JDBC more efficient than hibernate, but my persistence layer is hibernate , I think I ...

41. ACL Security    forum.springsource.org

ACL Security Hi, I've just completed a project with Rails (a once off project), and setting up security was a breeze using a plugin called Authlogic - all database tables and ...

42. Spring ACL Roles    forum.springsource.org

Spring ACL Roles I started working on ACL a month back and I have a requirement like this. A method with input parameter as report would have access to either an ...

43. ACL & User group management    forum.springsource.org

Hi all, I've read the reference documentation on Spring Security about "Domain Object Security". As mentionned in the documentation the SID (ACL_SID) refere to a principal (user) or an authority (role). ...

44. Spring security - acl problem    forum.springsource.org

[solved] Spring security - acl problem Hello I'm new in Spring. I try to make Acl system. Following the manual i wrote that code: Code: ObjectIdentity objectIdentity = new ObjectIdentityImpl(Mark.class, new ...

45. Spring Security 3 using hibernate with ACL    forum.springsource.org

I need to configure my web application to use Hibernate with ACL. How can I do this, because I didn't find any tutorial or samples for this from Google? Basically what ...

46. Using ACL for fields security    forum.springsource.org

hi! I understood that ACL is good for CRUDE operations on objects. How can i use it for CRUDE operations of objects fields? Is ACL a good solution or i should ...

47. How to do ACL (creating Roles on the fly?)    forum.springsource.org

How to do ACL (creating Roles on the fly?) Hello, I have reviewed the available documentation on ACL and SpringSecurity, I am not sure how would one go about in a ...

48. Is using Roles and ACL together overkill or typical?    forum.springsource.org

Is using Roles and ACL together overkill or typical? Please forgive my newbie question here. I have a new 3 tier application that requires security authorizations be placed on various domain ...

49. Spring Security ACL + Flex    forum.springsource.org

Spring Security ACL + Flex Hi, I`m trying to find out some tutorial where I can configure dynamically ACL, integrated with Flex. Before Spring Security, I was accustomed to use something ...

50. Spring Security + basic ACL implementation    forum.springsource.org

Nov 29th, 2010, 05:56 AM #1 afef View Profile View Forum Posts Private Message Member Join Date Sep 2010 Posts 48 Spring Security + basic ACL implementation Hi, I'm trying to ...