Re: Intercept web request before a event is called for Security Permission checks

[David E. Jones]

Is there a more specific case where this has come up?

-David


On Feb 15, 2007, at 2:02 PM, Anil Patel wrote:

The best thing to do is use an actual event for this, which may mean chaining to another request for security check pass/fail. Generally though there isn't page routing for security checks, but rather a change in a view and/or event that shows a message or whatever. In other words, the security checks in services and screens are the main touch points.

Hi,
Ofbiz Services security model allows us to intercept a call to service

intercept a Web Request for Security Check before the Event or view is
rendered, Something like

   <request-map uri="orderentry">
       <security https="true" auth="true"/>
       <permission-service service-name="orderEntryGenericPermission"
action="Create" error-view="PermissionErrorScreen" />
       <event type="java" path="

       <response name="init" type="view" value="checkinits"/>

       <response name="cart" type="view" value="showcart"/>
       <response name="error" type="view" value="checkinits"/>
   </request-map>

Thanks and Regards
Anil Patel

before the actual service executed. On similar lines Do we have a way to org.ofbiz.order.shoppingcart.ShoppingCartEvents" invoke="routeOrderEntry"/> <response name="agreements" type="view" value="orderagreements"/>

smime.p7s
Description: S/MIME cryptographic signature