Hi
I am trying to use XACML Policy Enforcement in fedora 3.6. Since
authentication is obtained in the Java based middle layer which access fedora,
user attributes needs get passed to fedora service to use the XACML policy
enforcement module.
I wrote a servlet filter called "TestFilter" to set a request attribute named
"fedora.server.Context.FEDORA_AUX_SUBJECT_ATTRIBUTES". I defined this servlet
filter in the fedora's web.xml file as below; but API calls are failing when
the "TestFilter" is in place. If any of you have done a servlet filter for the
same purpose, it would be grateful if you can share the code or give some
guidance.
<filter>
<filter-name>TestF</filter-name>
<filter-class>TestFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>TestF</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter>
<filter-name>RestApiFlashFilter</filter-name>
<filter-class>org.fcrepo.server.security.servletfilters.FilterRestApiFlash</filter-class>
</filter>
<filter-mapping>
<filter-name>RestApiFlashFilter</filter-name>
<servlet-name>RestServlet</servlet-name>
</filter-mapping>
<!-- Spring security -->
<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
Regards
Nilani
------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Fedora-commons-developers mailing list
Fedora-commons-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fedora-commons-developers
