Ionel,

You can implement your own loggin module and/or use a database JAAS login
module.

>From there, it is up to you to organize the security data in the DB as you
wish (with other DB tables that, for example, map a given user to a set of
functions/features/frames he has access to, etc.) Then, you can create a
bean that will query this database (the same used by JAAS) to give you with
this additional information.

Cheers,


                        Sacha


> -----Message d'origine-----
> De : [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]De la part de Ionel
> Gardais
> Envoye : mardi, 2 juillet 2002 10:49
> A : [EMAIL PROTECTED]
> Objet : [JBoss-user] dynamic GUI according to the rights
>
>
> Hi,
>
> I'd like to build a system with a dynamic GUI that shows/hides elements
> according to the Roles owned by the user.
>
> I've tried to retrieve the Principals through
> lc.getSubject().getPrincipals() but I get an empty set of principals so
> I can't (client side talking) know what is the client role.
>
>
> One of the things that disturbs me is that a client can't dynamicly know
> what it is allowed to do or not.
>
> I thought of a kind of "probe method" on the EJB. This method will be
> empty but secured by the minimum requiered level to run the EJB.
> Launching the application will log the client, try to run the probe
> method and if it succeed show the main frame, if it fails, warn the user
> and close.
>
> Another solution can be to create a parallel auth level map that map a
> username to a grant level.
> Each method call will be preceded by an "if" statement comparing the
> level retrieved for the user and the required level.
>
> This will work but, IMO, this is a double use of the JBossSX/JAAS. Why
> not totally drop the JAAS use and manage all via this system ? No. Even
> it does the job, I think this is not a clever way to do this.
>
>
> Any ideas are welcome,
> Thanks,
> ionel
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> JBoss-user mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/jboss-user
>



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to