[ http://mc4j.org/jira/browse/STS-432?page=comments#action_10902 ] 
            
Remi VANKEISBELCK commented on STS-432:
---------------------------------------

As far as I see, the SecurityInterceptor should provide a way for the 
implementor to reload the cache when he/she knows the roles structure has 
changed... stuff like SecurityManager.reloadCache().  

Then, by observing your own underlying implementation, you could explicitly 
call this method when you know a user's roles have been updated. 

Also, IMHO, the interceptor should propose 2 options :
1/ no cache, the interceptor calls the SecurityManager.xxx() methods without 
maintaining any state.
2/ use cache, and then you know you have to invoke the appropriate method if 
you change the user's roles

The way you implement the "observer" in 2/ is up to you, the developer. For 
example, in Woko, we "intercept" all updates on user and role, and reload the 
cache when needed, behind the scenes.

I don't think a fully generic solution can be provided here... I'd be happy if 
someone finds out one ;-P

My 0.02€

Remi

> NoCacheInterceptor and SecurityInterceptor
> ------------------------------------------
>
>                 Key: STS-432
>                 URL: http://mc4j.org/jira/browse/STS-432
>             Project: Stripes
>          Issue Type: New Feature
>          Components: ActionBean Dispatching
>    Affects Versions: Release 1.5
>            Reporter: Gregg Bolinger
>         Assigned To: Tim Fennell
>         Attachments: commons.tar.gz
>
>
> This is the NoCacheInterceptor and SecureInterceptor implementations.  I'll 
> attach the files in a comment

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://mc4j.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development

Reply via email to