Do not confuse roles and groups. A role, is best thought of as a permission. Your application has groups of users. If you assign roles (permissions) to groups you can accomplish what you're looking for.
For example, A secured resource such as... /userlogin/*=Admin,SuperAdmin The permissions reuired to access /userlogin/* should never change, but how those permissions are distributed would. You could have several groups that have Admin and/or SuperAdmin permissions... A "Chicago employees" group with the "Admin" role. A "System administrators" group with the "Admin and SuperAdmin" roles. Here's some topics from the forum, I recommend doing some searching there... http://forum.springframework.org/viewtopic.php?t=4515 http://forum.springframework.org/viewtopic.php?t=3668 -Ray On 6/30/05, Kjetil Paulsen <[EMAIL PROTECTED]> wrote: > ---------- Forwarded message ---------- > From: Kjetil Paulsen <[EMAIL PROTECTED]> > Date: Jun 30, 2005 8:09 PM > Subject: Adding roles without editing the configuration > To: [EMAIL PROTECTED] > > > Hi > > In our system we have the possibility to add roles (called > usergroups), Is there anyway to manage this in Acegi without adding > this role to the filter? > > Like now I have configured it like this: > > /userlogin/*=Admin,SuperAdmin > /admin/**=Admin,SuperAdmin > /secure.jsp=Admin,SuperAdmin > /**=ROLE_ANONYMOUS,Admin,SuperAdmin > > However, when I then add a usergroup called 'test' and a user called > 'test' in that group I can't log on because the group 'test' is not > any known role to Acegi and also not part of the ROLE_ANONYMOUS. And > of course we can't add each user created group to the xml config. > > Is this behaviour supportet by Acegi? > > /kjetilhp > > > -- > -Many secrets of art and nature are thought by the unlearned to be magical- > ------------------------------------------------------------------------ > | Kjetil H.Paulsen | Movegen 35, 2770 Jaren, Norway | > | kjetil AT java DOT no | Cell: +47 951387575 | > | kjetil DOT paulsen AT gmail DOT com | http://kjetil.i.am | > ------------------------------------------------------------------------ > > > ------------------------------------------------------- > SF.Net email is sponsored by: Discover Easy Linux Migration Strategies > from IBM. Find simple to follow Roadmaps, straightforward articles, > informative Webcasts and more! Get everything you need to get up to > speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&opclick > _______________________________________________ > Home: http://acegisecurity.sourceforge.net > Acegisecurity-developer mailing list > Acegisecurity-developer@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer > ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click _______________________________________________ Home: http://acegisecurity.sourceforge.net Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
