grails 1 « Security « Spring Q&A





1. Spring Security Between Two Apps    stackoverflow.com

I am using the Spring Source 2.0 security plugin and I've done the tutorial described on this page using the Requestmap method of security. Acegi Plugin Tutorial I now want to ...

2. Grails Security Problem and Search Engine optimization    stackoverflow.com

I'm trying to build a control logic that depends on the current gsp page to call an action, is there a tag or a session method that i can use to ...

3. Acegi/Spring Security Grails plug-in not seeing changes to a User instance    stackoverflow.com

I am writing a web app in Grails with the Acegi/Spring Security plug-in, and am having trouble getting it to see changes I make to User instances. I have only been ...

4. Can I Do This In Grails 2: Secure Individual Tabs with Spring Security    stackoverflow.com

If I create tabs using one of the Grails GUI options (which one should I use), is it possible to turn tabs on and off, based on the current user? For ...

5. Using the Spring Security plugin with Grails without the domain model    stackoverflow.com

We're using Grails but with an existing model layer and DAO layer. We have an app written already in Spring MVC, using Spring for IoC and also Security. I'm ...

6. Using Java Domain Objects With Spring Security Plugin    stackoverflow.com

I'm working with a legacy database and corresponding Java Domain Classes. I'm trying to add Spring Security to the app and I'd like to use Java Domain Classes for that too, ...

7. CookieTheftException with PersistentTokenBasedRememberMeServices    stackoverflow.com

I'm using the PersistentTokenBasedRememberMeServices (Spring Security 2.04) in Grails App in conjunction with the OpenIDAuthenticationProcessingFilter. The configuration is as follows (This is Grails's DSL equivalent to Spring ...

8. View Level Security Pattern    stackoverflow.com

Background: The grails application I am developing has a few levels of granular security. First the least granular is at the controller level. Either you can view a specific page or you ...

9. Custom authentication    stackoverflow.com

My system has 2 subsystems. Each subsystem has different set of users. Each user has an extra field "SystemName" that can be used to know which system this user belongs to. In ...





10. Checking if specific user has a role    stackoverflow.com

is there some pretty way to check if some specific user (not the one that is logged in) has some specific role? Here is grails example (generally the same for plain Java ...

11. Grails acegi plugin classes not added to maven    stackoverflow.com

I created a grails 1.2.0 project using the acegi plugin 0.5.2 which works very well. To integrate the project into our companies build infrastructure I need to build it via maven. ...

12. Grails Acegi: update username    stackoverflow.com

I'm using the Acegi (AKA Sprign Security) plugin in my Grails app. InSecurityConfig.groovy I have added the line

userName = 'email'
such that the email field is used as the username. I find ...

13. External user domain in grails    stackoverflow.com

We're currently using Acegi 0.5.2 plugin for Grails 1.2.1. However, we're going to move our user management to external CRM. What would be the best way to link existing Person domain ...

14. Spring Security 3.0- Customise basic http Authentication Dialog    stackoverflow.com

Rather than reading; A user name and password are being requested by http://localhost:8080. The site says: "Spring Security Application" I want to change the prompt, or at least change what the ...

15. How do you setup an gsp snippet in grails and with spring-security-core?    stackoverflow.com

I have a block of gsp I'd like to reuse and make into a little gsp snippet:

<sec:ifLoggedIn>
    <g:link controller="user" action="showProfile">My Profile</g:link> |
    <g:link controller="privateMessage" action="list">Inbox</g:link> ...

16. After installing the spring-security-core grails plugin, how do you get IDEA to know about the jar files?    stackoverflow.com

I have installed spring-security-core in a grails project, but for some reason, IDEA didn't automatically pick up the jar files. I can deploy the app and run tests using the grails ...





17. How To Save Spring Security Logged In User In Session    stackoverflow.com

This code get's the currently logged in user, using the Spring Security Plugin (acegi):

def principalInfo = authenticateService.principal()
def person = null
if (principalInfo != "anonymousUser" && principalInfo.username) {
    person = ...

18. Spring security plugin not throwing events    stackoverflow.com

I am in the process of migrating to spring security plugin from acegi plugin.Currently working on grails environment. I am facing a weird issue as my authentication success event and authentication ...

19. getting the url in the case of an auth failure    stackoverflow.com

In grails acegi plugin, you can specify the authenticationFailureUrl property in SecurityConfig. Is there a way to get the url that caused the auth failure in the scope of the ...

20. Spring Security (Acegi) and user Groups (vs. Roles)    stackoverflow.com

We're developing an app (using Grails Spring Security (formerly Acegi)) in which we'll have thousands of users that span 10-15 discreet user types. In the current system, each user type ...

21. getting Principal during Grails Spring Security authentication    stackoverflow.com

I'm wrapping up an implementation of Spring Security in Grails. This is my first implementation on Spring Security- previously I used Acegi. Here's the problem I'm having. In Acegi, I ...

22. Grails: User evaluator for Commentable with Spring Security plugin    stackoverflow.com

I am trying to use the commentable plugin with Spring Security. I can't manage to write the right grails.commentable.poster.evaluator I tried {User.get(springSecurityService.principal.id)}, but from the CommentController, both User and springSecurity seems unaccessible. What should ...

23. Grails + Securing Application    stackoverflow.com

Im working on a legacy grails application. I have a couple of tables like this

User ( id, name,enterprise_id)

Enterprise (id, name)

Asset (id,description, enterprise_id)
I want to validate that when a certain user wants to ...

24. Spring Security Grails Plugin working with existing Database Schema?    stackoverflow.com

I recently ran into a situation where I wanted to implement Grails + Spring Security over an existing database schema. The Database already had a users table, a roles based ...

25. sharing authentication across multiple plugins in Grails    stackoverflow.com

I have modularized a large Grails project into several plugins and want to share access to the spring security plugin to manage authentication across my project - is there an easy ...

26. Grails Spring Security Plugin- Want to create Project specific User's roles?    stackoverflow.com

I have domain Classes "Project" and "User" and need to implement authentication using Spring Secutity plugin. The default implementation of this plugin provides us to create ROLES that are User specific. ...

27. UI Integration sample required of Spring Security Plugin of Grails    stackoverflow.com

I have been working with grails application and for security purpose used the spring security core. Now with that they are also providing the UI stuffs of security. So I have installed ...

28. curl + jsecurity authentication    stackoverflow.com

I have a grails app that is using jsecurity plugin for authentication. How do I use curl to send my credentials? If I just do curl -u username mysite I get a prompt ...

29. Grails 1.3.5 and Spring Security Core    stackoverflow.com

I have build a grails application, which on login redirects users to different URLs based on User's role (custom roles defined in roles domain). Now I am trying to integrate Spring ...

30. Grails + Selenium + EasyB +spring-security-core: ifAnyGranted Isn't Working    stackoverflow.com

Grails 1.3.5 and have selenium-rc, easyb, and spring-security-core plugins installed. Everything seems to work really well except this one case I've run into. I have a page I am ...

31. Spring Security Core Grails Plugin Issue    stackoverflow.com

I have just read the basic information for the spring security core grails plugin and installed it in my grail project :

grails install-plugin spring-security-core
After that I have used s2-quickstart providing by ...

32. Grails Acegi Url mapping weirdness    stackoverflow.com

This is Grails 1.2.0 and Acegi 0.5.2. Part of my security config (the requestMapString):

requestMapString = """\
        CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
        PATTERN_TYPE_APACHE_ANT
 ...

33. Grails. spring security core. Install problem    stackoverflow.com

I try install Spring security core plugin in Grails. I run this command:

grails install-plugin spring-security-core
and in result i see this error message:
:: problems summary ::
:::: WARNINGS
       ...

34. Log Spring Security Principal in Grails    stackoverflow.com

How can I log the User Principal in my Log4J Log with Grails? I want to see the name of the current login when an exception occurs, ie logging the current principal ...

35. Control Menu Items based on Privileges of Logged In User with spring security    stackoverflow.com

Based on this link I have incorporated the spring security core module with my grails project... I am using the Requestmap concept by storing each role, user and requestmap ...

36. problem in handling menu - submenu based on spring security    stackoverflow.com

I have configured spring security core plugin using requestmap table inside the database.. Now inside requestmap table I have all the possible urls and it's equivalent roles who can access that url... Now ...

37. Grails Spring Security Core plugin - How do I limit concurrent sessions?    stackoverflow.com

I am trying to configure Grails Spring-Security-Core plugin to limit the number of concurrent sessions that a user can have to one. I see in the Spring Security documentation a ...

38. Grails and hudson plugin issue    stackoverflow.com

I'm developing my first project in Grails framework. I'm using Spring Security Core plugin. On my machine, on newest IntelliJ Idea everything works fine. I can run, test and so on ...

39. Grails Spring Security "remember me" causes TypeMismatchException    stackoverflow.com

I've been having a problem with the Spring Security Core plugin for Grails, which I'm using in conjunction with Spring Security UI. On the provided login page, if I check ...

40. How to use Grails Spring Security Plugin to require logging in before access an action?    stackoverflow.com

I know that I can use annotation or Request mapping to restrict access to an ACTION by some specific ROLES. But now I have a different circumstance. My scenario is: every user ...

41. Store access token on my Grails OAuth provider using Spring Security 3    stackoverflow.com

I've just implemented a oAuth provider for my Grails application, and can sucessfully authenticate my client application (using signpost). The next thing I want to do is persist the access token, ...

42. Grails spring-security-core plugin expects a username column in the role table    stackoverflow.com

I have a really strange problem. I've installed the spring-security-core 1.0.1 in my Grails 1.3.6 application and configured it according to the tutorial - tables are created orderly and populated by ...

43. Grails Inline Plugins And Spring Security    stackoverflow.com

I'm breaking my grails application into modules by using plugins and then adding the inline plugin locations to BuildConfig.groovy. Right now I have a grails application called 'admin' and a ...

44. Grails spring security core, how to set principal manually    stackoverflow.com

Hi im trying to make facebook's login in a grails app, the problem I have is that when the user is logged in facebook, spring security core doesn't recognize him, how ...

45. Grails spring-security-core plugin question: password in User class isn't String    stackoverflow.com

I'm working on an application which stores password as byte[] in the db. I can't change the db. So my domain class has the following:

String userId
byte[] userPasswd
I know i can customize the ...

46. spring-security-core authenticate    stackoverflow.com

I am working with spring-security-core and hbase plugins. In my db there are users and I only want to check is there any user with such username and password. If anyone know which properties ...

47. Grails Spring Security Plugin - ONE-TO-ONE association with User domain    stackoverflow.com

I'm using Spring Security Plugin to manage membership and authentication in my Grails app. I'm trying to associate the User domain class with a Profile domain by a one-to-one association. I added these ...

48. Grails spring-security-core plugin installation never completes    stackoverflow.com

Using Grails 1.3.7 Windows 7 I've tried this on a brand new grails project...althouGh i have other grails versions installed on the system (no longer in PATH however). When executing grails install-plugin spring-security-core the ...

49. Grails Spring Security Slow Startup    stackoverflow.com


Environment : Intel Core 2 duo, 3 gig RAM, Ubuntu 9.10, Grails 1.3.5, Spring security plugin 1.1.2
JVM Parameters : -Xms512m -Xmx1024m -XX:MaxPermSize=512m Starting an application that uses the ...

50. Authenticate user using external webservice in grails    stackoverflow.com

In my grails application I'm using spring security plugin to handle authentication using email and password of a user. Now I need to integrate my application with an external system which works ...

51. Write operations are not allowed in read-only mode (FlushMode.MANUAL): with grails hibernate    stackoverflow.com

I have integrated spring security plugin with my grails application, which has hibernate as an ORM tool... using spring security plugin everything is working fine with my application including authentication, authorization... But recently ...

52. Variable not working in a GSP Tag, but working in normal Text    stackoverflow.com

I want to give the logged in User the Possibility to edit his User account with a Quick Link. For this I created a Link using the correct GSP Tag, and I ...

53. spring security - one active role    stackoverflow.com

Imagine that users can have one or more roles in the system. after login the user have to choose on of these roles. at this point only this selected role should ...

54. Should admin account be in the same user class as a customer?    stackoverflow.com

I learn Grails and Spring Security plugin. I don't know how to design sample web application with two layers: customer can view product and categories and order a product (if he/she is ...

55. Grails w/ Spring Security Core only allowing owner to update in GSP    stackoverflow.com

This question has some code to add to the controller closure, which is fine, but what if I want to use the grails default scaffolding views but only have the ...

56. Grails Spring Security Plugin - Username escaping problem    stackoverflow.com

I'm currently working with Grails and the Spring Security plugin and trying to implement a password expiration workflow. I've configured the plugin as expected:

grails.plugins.springsecurity.failureHandler.exceptionMappings = [
    'org.springframework.security.authentication.CredentialsExpiredException': '/login/passwordExpired'
]
and ...

57. Grails App Deployed as ROOT.war, j_spring_security_check throwing NPE and HTTP 500    stackoverflow.com

Grails 1.3.6 Tomcat6 I created a production ROOT.war. Deleted the default tomcat ROOT directory. Deployed the ROOT.war and started tomcat. The app kicks off just fine. However, it seems ...

58. grails acegi security constraints bypassed on forward    stackoverflow.com

After googeling i found references that states that acegi security constraints isn't uphold upon forward. I tested it in my application, and i can confirm that i suffer from this issue. Does anyone ...

59. How to share Spring Security classes between a Grails app and a Java app?    stackoverflow.com

I need to use the Spring Security User, Role/Authority and the UserRole-join classes both in a Grails application and a Java app. Where and how should I implement/generate these classes? If I use ...

60. Grails - uninstalling Spring Security Core    stackoverflow.com

What is the correct way to uninstall spring-security-core plugin completely? I'm working on a Grails app that no longer needs a login and I'd like to remove it. Even though I have ...

61. Upgrading from stark-security to spring security plugin    stackoverflow.com

I recently upgraded a project's Grails from 1.0.5 to 1.3.7. Project has Stark-security plugin (0.4.3) in use and I'd like to replace it with Spring-security plugin (latest). I understand that Stark-security ...

62. how to show user list in grails using netbeans    stackoverflow.com

This is my code for Usercontroller

class UserController  {

   def springSecurityService

   def save = {
      def userInstance = new User(params)
   ...

63. How to enable the EHCache based ACL Caching in Grails Spring Security ACL Plugin?    stackoverflow.com

We are using the Grails Spring Security ACL Plugin for managing the ACLs on our Domain Classes. Occasionally we've to display lists of these Domain Classes, which have to respect the ...

64. Grails Spring Security plugin - modify logged in user's authorities    stackoverflow.com

I have a simple Grails app with Spring Security Core plugin installed and working fine. However, I haven't found any solution to the problem with updating a logged in user's authorities ...

65. Hooking into pre-authentication with spring-security-core    stackoverflow.com

I'm needing to do some custom things when a user tries to log in depending on their username but these things need to happen before the authentication process. Here's what ...

66. Grails Spring Security Plugin: How do I use the registration code to invite users to register?    stackoverflow.com

I'm using spring-security-core and spring-security-ui with Grails 1.3.7. I can't find anything in the docs that explains how to use the Registration Code functionality. I want to have users signup, and ...

67. How to get current user role with spring security plugin?    stackoverflow.com

I am using the spring-security-core plugin in my grails app. I need to know the current user's role in a controller action. How can I retrieve that?

68. create users with spring security plug-in for Grails    stackoverflow.com

I'm using the spring security core plug-in in a Grails app. I managed to install the plug-in and provide a default user in the bootstrap which is working fine. However I ...

69. How to come out of error-org.springframework.beans.factory.BeanCreationException?    stackoverflow.com

I am using spring security core plug in in my grails app. When I run the app, I'm getting following error. How can I solve this?

Configuring Spring Security ...
2011-06-30 10:45:19,468 [main] ...

70. How to extend Spring Security User Class in grails?    stackoverflow.com

I am using spring security plugin in my grails app.i have extended Springs User class in my own generated Physician class..now when i run app i am not getting physician table ...

71. Can Mutual Certificate based Authentication co-exist with Basic Auth over SSL for different paths within the same application?    stackoverflow.com

I have a scenario where we are developing an app with both a Business to Customer interface, and a Business to Business interface. The B2B interface is a RESTful interface to modify ...

72. How to assign role to a new user in bootstrap with grails spring security?    stackoverflow.com

In my grails app i am using spring security plugin..I have registration form and registered users will be stored in db table. in bootstrap i have created new role as, def PhysicianRole ...

73. Wild card url interception in Grails using Spring Security    stackoverflow.com

I'm trying to secure any url starting with /admin with a wild card. All my admin actions start with admin and then the entity name as mentioned below. /adminPerson/create /adminPerson/show /adminDepartment/create etc so I want ...

74. GRAILS: how to get the number of currently signed in users via spring security core plugin?    stackoverflow.com

my problem is, that i want to limit the number of users that can simultaneously be logged in my application (this value is stored in the database). first i tried ...

75. Grails Spring Security: Switching between dual ROLEs    stackoverflow.com

In my project certain users have dual roles, so if any such user logs in how can I make him switch between those 2 ROLES he has so that he can ...

76. use existing domain classes with Spring Security plugin    stackoverflow.com

I'm trying to convert a Stripes web app to Grails. The Stripes app uses Spring Security, but I would like the Grails app to use the Spring Security Grails plugin. The ...

77. Spring Security Plugin Authentication Failure Issue    stackoverflow.com

EDITED HEADER: more related with the actual problem I'm trying to setup spring security for my test application i installed the plugin , created User and Role classes ; put this to UrlMappings.groovy;

 ...

78. Integration testing grails spring security plugin?    stackoverflow.com

I have this:

@Secured(['ROLE_USER', 'ROLE_HELPDESK', 'ROLE_ADMIN'])
class MyController {
    def edit = {
    }

    @Secured(['ROLE_ADMIN'])
    def uploadForUser = {
   ...

79. How to use xfire plugin in spring security based application developed with grails spring framework?    stackoverflow.com

I have developed a small application in grails by using spring security plug in and its working fine, Now i want to make it a web service,By googling i found xfire plug ...

80. Securing gsp files    stackoverflow.com

I'm relatively new to Spring, but very new to Spring Security and Grails. To be brief, I know its recommended to not allow .jsp files to be servable, you should ...

81. Grails App Deployed to 2 Servers behind Load Balancer - Spring Security clearCachedRequestmaps()    stackoverflow.com

We have a Grails (1.3.7) application deployed to 2 web servers that are sitting behind a load balancer. The problem we're seeing is that when we modify the RequestMaps the ...

82. How to configure grails/spring authentication scheme per url?    stackoverflow.com

How can I configure a grails application using Spring security such that one set of url's will redirect unauthenticated users to a custom login form with an http response code of ...

83. Overriding AjaxAwareAuthenticationSuccessHandler.onAuthenticationSuccess Gotchas    stackoverflow.com

I wrote a custom success handler for our application because the client was to redirect to specific pages based on roles. In doing this, I was originally calling super.onAuthenticationSuccess but ...

84. how to provide authorisation to grails services using xfire plug in to grails spring security based application?    stackoverflow.com

I have grails app using spring security plugin,i need to expose some of its services as web services so using xfire plugin,How can i give security to these services?, With advance thanks, Swati ...

85. Error while installing spring-security-plugin in Grails app    stackoverflow.com

I am trying to install the spring-security-core plugin in my grails application. I am working on a 32 bit windows application. However I am unable to install the same. I have ...

86. Spring Security UI, recommendation on other complementary Forms / UI plugins    stackoverflow.com

The Spring Security UI has a very nice interface and menuing system. I'm wondering if you can recommend which other Grails Form / UI plugins would be most complementary. ...

87. Extending Spring Security UI plugin (and plugins in general)    stackoverflow.com

The Spring Security UI plugin, among other things, provides a registration page. On this page are 4 fields: username, email, password, and verify-password. It uses a regular architecture of ...

88. how to get forgot password with grails application using spring security core plugin?    stackoverflow.com

In my grails application,i am using spring security core plugin for security,and email confirmation plugin for email validity,now i need to implement code for forget password. Do i need to use spring ...

89. Grails Spring Security 1.2.1 and eraseCredentialsAfterAuthentication    stackoverflow.com

I am interested in clearing the plain-text password from the Credentials object after a successful authentication, and was wondering what the best method to do this is? It looks like ...

90. Grails + Flex + Spring Security Integration    stackoverflow.com

I was just wondering how secure a flex application would be if you wrap the SWF in a gsp, and configure Spring Security in the usual way you would do for ...

91. Grails Spring Security required fields    stackoverflow.com

According to spring-security-core documentation the only fields required in the User class are

String username
String password
boolean enabled
Though, after loging-in with my correct username and password, I get the following error:
...

92. Grails Multi-tenant & Spring Security Core plugins    stackoverflow.com

I am using Grails multi-tenant plugin with single-tenant mode. I have used spring security core plugin for authentication. I have used domain name resolver. User table is not common in default ...

93. using grails security model (acegi) outside of grails    stackoverflow.com

I have an existing grails application that was developed using the older acegi security plugin. I would like to develop additional applications (non-grails) that uses the same security model. ...

94. Grails Spring Security Authentication - GSP error not shown    stackoverflow.com

I am new to Grails Spring Security and am struggling to show the login error message. The plugin is installed and correctly configured against my DB. When a wrong username/password is ...

95. Grails + spring-security-core: How to assign a role after user has logged in?    stackoverflow.com

I have a grails application that uses spring-security-core and spring-security-ldap, with authentication against Active Directory. I have a custom UserDetails and UserDetailsContextMapper. I have a use case where a user can temporarily ...

96. Spring Security Plugin in Modular Applications    stackoverflow.com

I'm starting a new, modular Grails application. I'm creating a domain plugin and of course need a User/Person domain. Do I add the Spring Security Core plugin to domain, just to generate ...

97. Grails and Apache Shiro - How to implement doUpdatePassword and doResetPassword closures    stackoverflow.com

I'm developing a Grails app and I'm using Shiro to handle the access security. I think my app is now secured but there are some missing features. The generated password is ...

98. Grails with Spring Security Plugin and Salted Passwords    stackoverflow.com

I am trying to do salted password hashing in my Grails + Spring Security application. I have used the tutorials on the Grails site, and also ones I found randomly on ...

99. Extending AjaxAwareAuthenticationSuccessHandler, Remembering destination URL    stackoverflow.com

Grails 1.3.7 Spring-Security-Core 1.1.2 I've implemented a custom class that extends AjaxAwareAuthenticationSuccessHandler so that specific roles can be taken to specific URL's after logging in which works great. However, if the session ...

100. Issues customizing Grails Spring Security plugin    stackoverflow.com

Grails 1.3.7 Spring Security 1.2 I'm trying to customize spring security to support the following requirements. The grails app. must authenticate using additional data when login requests are recieved on a ...