[ http://jira.andromda.org/browse/SPRING-97?page=comments#action_11941 ]
     
Kiran Keshav commented on SPRING-97:
------------------------------------

This patch, along with the patch for Jira issue SPRING-96 
(http://jira.andromda.org/browse/SPRING-96?page=history) will generate the 
serviceSecurityInterceptor in each service bean declaration in 
applicationContext.xml, as well as much of the authorization code, including 
but not limited to the serviceSecurityInterceptor, voters, and the 
accessDecisionManager.  Acl processConfigAttributes can be added to a model as 
tagged values on a WebServiceOperation stereotype, and the corresponding voter 
will be generated. 

> Create methods in the serviceSecurityInterceptor from objects with a 
> "Service" stereotype and add a tagged value for the processConfigAttribute
> -----------------------------------------------------------------------------------------------------------------------------------------------
>
>          Key: SPRING-97
>          URL: http://jira.andromda.org/browse/SPRING-97
>      Project: Spring Cartridge
>         Type: New Feature
>     Versions: 3.1RC1
>     Reporter: Kiran Keshav
>     Assignee: Chad Brandon
>  Attachments: SpringMetafacadeModel.xml.zip, patch.txt
>
> Add functionality to create all methods in the serviceSecurityInterceptor 
> based on methods in a service (objects modelled with a "Service" stereotype). 
>  Add a tagged value to set the processConfigAttribute on each of these 
> methods (ie. ACL_FOOBAR_EDIT).  This tagged value will be part of the 
> WebServiceOperation stereotype.
> eg.
> <bean id="serviceSecurityInterceptor" 
> class="net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor">
>       <property name="authenticationManager"><ref 
> bean="authenticationManager"/></property>
>       <property name="accessDecisionManager"><ref 
> local="businessAccessDecisionManager"/></property>
>       <property name="afterInvocationManager"><ref 
> local="afterInvocationManager"/></property>
>       <property name="objectDefinitionSource">
>          <value>
>             foo.bar.FooBarService.getAllFooBars=user, admin
>             foo.bar.FooBarService.updateFooBar=ACL_FOOBAR_EDIT
>             foo.bar.FooBarService.removeFooBar=ACL_FOOBAR_DELETE
>          </value>
>       </property>
>    </bean>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.andromda.org/secure/Administrators.jspa
-
If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Andromda-devel mailing list
Andromda-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/andromda-devel

Reply via email to