Once again Ben, thank you very much. This one will handle the last 5% of cases we need.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Ben Alex > Sent: Sunday, November 14, 2004 7:39 PM > To: [EMAIL PROTECTED] > Subject: [Acegisecurity-developer] New features now in CVS > > Hi everyone > > I've just committed a (potentially very useful) new feature to Acegi > Security. "After secure object invocation" allows you to throw an > AccessDeniedException or modify the Object returned from your secure > object invocation. > > There's a new package, net.sf.acegisecurity.afterinvocation, which > contains a couple of related providers. Both use AclManager and the > integer bit masking provided by net.sf.acegisecurity.acl.basic. One of > the providers throws an AccessDeniedException if the Authentication > doesn't have an ACL permission for the returned Object (the required > permission is defined in the application context). The other provider > removes any item from a Collection if the Authentication doesn't have an > ACL permission for that particular Collection element (again, the > required permission is defined in the application context). > > To help with "before" invocation ACL security, there's also a new > AccessDecisionVoter called BasicAclEntryVoter. It votes to deny access > if the Authentication doesn't have an ACL permission for a given method > argument (the class type of the method argument, the permission required > etc are application context defined). > > The above isn't documented yet, but the Contacts sample application has > been extensively refactored to use the above. Contacts are no longer > owned by a single principal, but there is an ACL for each Contact. > Permissions used include administer, delete and read. If the administer > permission is held, the principal can modify the permissions list, > adding or deleting ACL entries. > > I'd be interested in what people think of these changes. In particular, > please give Contacts a try and report any bugs to the list. To build it > you'll need to CVS checkout, then from core do a "maven jar:install", > then from samples/contact do a "maven war". > > Best regards > Ben > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: InterSystems CACHE > FREE OODBMS DOWNLOAD - A multidimensional database that combines > robust object and relational technologies, making it a perfect match > for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 > _______________________________________________ > Acegisecurity-developer mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ Acegisecurity-developer mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
