I just read the acegi chapter in Rod Johnson’s new book on Spring 
(http://www.powells.com/biblio?partner_id=29649&cgi=product&isbn=0764574833)



He shows a domain object with authorization added in the Spring application 
context. This would be a compelling security feature if the model generated it 
for entities. Say I have a Person entity with an association to a CreditCard 
entity. I could then model access control on the Person’s getCreditCard() 
method while allowing anonymous access to other Person methods.



Businesses would be more willing to eliminate data islands with this layer of 
security.



I implementation looks close to what you’ve already done for Services.
_________________________________________________________
Reply to the post : http://galaxy.andromda.org/forum/viewtopic.php?p=2688#2688
Posting to http://forum.andromda.org/ is preferred over posting to the mailing 
list!


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Andromda-user mailing list
Andromda-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/andromda-user

Reply via email to