Nathan,

Spring Security (previously Acegi) is an option for role-based authorization. Acegi had a reputation for being very complex. Spring Security is significantly less so for typical use cases. However, it probably only makes sense to use it if you're interested in using other Spring facilities also.

Out of the box, you can have authentication, role-based authorization at the URL level, business method @Secured annotations on Spring- managed objects, and JSP tags providing conditionals based on authentication and authorization. Its also straightforward to make role-based decisions within your code.

Besides the Spring Security docs, for a more concrete example, you could take a look at AppFuse and Matt Raible's blog to see how he implemented Spring Security.

There's no specific integration with Stripes required. As usual, Stripes just does its thing and doesn't get in the way.

Hope this helps,

Chris.

On Sep 21, 2008, at 7:42 PM, Nathan Maves wrote:

After read both articles on the site and the security chapter in the upcoming book I am still questioning what the best practice is for roles based authentication.

I am looking for a good way to make roles based decisions inside of an actions execution method.

Any one have any good ideas or examples?

Nathan
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/_______________________________________________
Stripes-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-users

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Stripes-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-users

Reply via email to