Hi, I'm using a multi-realm setup where some realms provides users and roles and another provides permissions.
So for example, one realm is an LDAP realm that provides usernames and roles from the LDAP groups. I want my second realm to provide permissions for these username, but also for the roles. Returning permissions is done in a doGetAuthorizationInfo() method on my custom realm (which hits a database table). I use getPrimaryprincipal() which provides my unique user ID. But I cannot see any way to lookup permissions based on the user's roles. The PrincipalsCollection doesn't seem to provide these. Should I be overriding some other method of AuthorizingRealm? How can I lookup permissions in one realm for a role defined in a different realm? Thanks, Philippe -- View this message in context: http://shiro-user.582556.n2.nabble.com/Multiple-realms-and-roles-tp6178792p6178792.html Sent from the Shiro User mailing list archive at Nabble.com.
