Thursday, November 6, 2003 05:33:14

Hello Steven.
 
JBoss is very flexible :)

SH> Isn't this user information cached?
Yes, it is (or it should be cached).

SH> I can't imagine that Jboss would do a db lookup every time a
SH> method is invoked.
You can keep security information in any place (file, LDAP server,
database, JNDI service, etc.) - it depends or the server login module
configuration. In addition, user/role information is cached after
successful authorization.

SH> So wouldn't you have to flush this cache?
Yes, you have to do something with the cache - flush it totally,
remove the user (which associations with roles were changed) from the
cache, or change the default security cache in a way you will be able
to make correspondent modification without cache flushing and user
re-login.


Best regards,
Alexander

On  Wed, 5 Nov 2003 09:41:52 -0500, you wrote:

SH> Isn't this user information cached? I can't imagine that Jboss would do a db
SH> lookup every time a method is invoked. So wouldn't you have to flush this
SH> cache?

SH> -----Original Message-----
SH> From: Alexander Titov [mailto:[EMAIL PROTECTED]
SH> Sent: Wednesday, November 05, 2003 2:59 AM
SH> To: Nishant Aggarwal
SH> Subject: [JBoss-user] Dynamic Addition of Roles using JAAS


SH> Wednesday, November 5, 2003 07:49:22

SH> Hello Nishant.

SH> I think it is possible.

SH> The security data (users, user groups, roles, and their associations)
SH> storage place is depends upon your decision. JBoss fetches these data
SH> during user authentication and authorization of user access to the EJB
SH> operations. It means that in the worst case, you have to force you
SH> user to make re-logon.

SH> I think that the best way to find information how to do it, is to read
SH> chapter 8 of the JBoss Administration and Development book.

SH> Ask more specific questions, to get more precise answers.
 
SH> Best regards,
SH> Alexander

SH> On  Wed, 5 Nov 2003 12:40:44 -0800, you wrote:

NA>> Hi,
NA>> I have requirement in which I need to add dynamically, "new" roles
NA>> to my users.
NA>> But the problem being that I need to do it without restart of
NA>> JBoss. Is it possible?

NA>> Any help will be greatly appreciated?

NA>> Thanks in advance,
NA>> Nishant.



SH> -------------------------------------------------------
SH> This SF.net email is sponsored by: SF.net Giveback Program.
SH> Does SourceForge.net help you be more productive?  Does it
SH> help you create better code?   SHARE THE LOVE, and help us help
SH> YOU!  Click Here: http://sourceforge.net/donate/
SH> _______________________________________________
SH> JBoss-user mailing list
SH> [EMAIL PROTECTED]
SH> https://lists.sourceforge.net/lists/listinfo/jboss-user


SH> -------------------------------------------------------
SH> This SF.net email is sponsored by: SF.net Giveback Program.
SH> Does SourceForge.net help you be more productive?  Does it
SH> help you create better code?   SHARE THE LOVE, and help us help
SH> YOU!  Click Here: http://sourceforge.net/donate/
SH> _______________________________________________
SH> JBoss-user mailing list
SH> [EMAIL PROTECTED]
SH> https://lists.sourceforge.net/lists/listinfo/jboss-user



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
JBoss-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/jboss-user

Reply via email to