Quote:


Do you have a good design pattern, or a way to model the access control to 
individual methods of services ?


(end of quote)




The design pattern is to use a service layer that runs in a controlled 
environment, i.e. on the server ;-) 



As to defining access control for indivdual service methods, that's what 
declarative security in EJB (if you use session beans) is for: Just add the 
appropriate constraints to the EJB descriptor. I think there's some package 
that supports declarative security in Spring as well. But as far as I know, 
there is no support for modeling per-method security constraints in AndroMDA 
yet (I may be wrong though - at the moment, I'm working on a project where I 
can't use AndroMDA, so I'm not quite up to date on the subject)
_________________________________________________________
Reply to the post : http://galaxy.andromda.org/forum/viewtopic.php?p=1743#1743
Posting to http://forum.andromda.org/ is preferred over posting to the mailing 
list!


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Andromda-user mailing list
Andromda-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/andromda-user

Reply via email to